CVE-2013-3307

This flaw lets an attacker send a specially crafted “ping” request to your router and force it to run commands on the router itself. Think of it like giving someone a shortcut to press hidden buttons inside your device’s operating system.
If exploited, the attacker can turn your router into a launchpad for scanning and routing malicious traffic.

This matters if your small business runs a Linksys e1000, e1200, or e3200 router that matches the vulnerable firmware ranges. The issue is reachable over the network and does not require a login or user action, which makes it especially dangerous when the device is exposed.
Act based on whether your router is reachable from the internet on the affected service (TCP port 52000 in particular); if it’s not reachable, risk is reduced.

This is RED because attackers have already exploited CVE-2013-3307 in the real world to compromise routers at scale. Even without a known public exploit package, the documented malware activity means this is not just theoretical.
Treat any internet-reachable affected routers as an active risk and prioritize mitigation immediately.