Описание
There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size in the httpd s Start_EPI() function, thereby gaining shell privileges.
Ссылки
- Product
- ExploitMitigationThird Party Advisory
- Product
- ExploitMitigationThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:linksys:wrt54gl_firmware:4.30.18.006:*:*:*:*:*:*:*
cpe:2.3:h:linksys:wrt54gl:-:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.62908
Средний
7.2 High
CVSS3
Дефекты
CWE-77
CWE-77
Связанные уязвимости
CVSS3: 7.2
github
больше 2 лет назад
There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size in the httpd s Start_EPI() function, thereby gaining shell privileges.
EPSS
Процентиль: 98%
0.62908
Средний
7.2 High
CVSS3
Дефекты
CWE-77
CWE-77