Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DD-WRT Web管理接口远程Shell命令注入漏洞
Vulnerability Description
DD-WRT是一个供无线路由器使用的嵌入版Linux,可以在普通的家用无线路由器实现商用无线路由器功能。 DD-WRT的httpd.c文件中存在多个安全漏洞: 859 if (containsstring(file, "cgi-bin")) { 860 861 auth_fail = 0; 862 if (!do_auth 863 (conn_fp, auth_userid, auth_passwd, auth_realm, 864 authorization, auth_check)) 865 auth
CVSS Information
N/A
Vulnerability Type
N/A