Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jc49-c4w8-g43h

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests.

httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests.

EPSS

Процентиль: 80%
0.01411
Низкий

Связанные уязвимости

nvd
больше 16 лет назад

httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests.

EPSS

Процентиль: 80%
0.01411
Низкий