AI analysis
Claude Opus · 7 Nov 2026, 10:20 CET
Linksys WRT54GL ping diagnostic flaw allows OS command injection on unsupported routers
Linksys WRT54GL firmware 4.30.18 lets an attacker with administrative access inject operating system commands through the Ping Diagnostic feature. The product is no longer supported and no fix is listed, so replacing affected routers is the practical remedy.
In plain terms
The Linksys WRT54GL is a home and small-office router. Its web management interface includes a ping diagnostic tool, which checks whether another device on the network can be reached. In firmware version 4.30.18, the address typed into this tool is passed to the router's operating system without proper checking. This is called command injection: an attacker can slip their own instructions into the input, and the router runs them.
According to the sources, the attacker needs administrator-level access to the router's interface. With that access, they could take full control of the device. The product is no longer supported by the vendor, so no fix is expected. Anyone still running WRT54GL routers, especially with remote management enabled or weak or default admin passwords, should take note.