An issue exists in Linksys Router E1700 1.0.04 (build 3), allows authenticated malicious users to escalate privileges via a crafted GET request to the /goform/* URI or via the ExportSettings function.