Unscored CVE-2008-6554 EUVD-2008-6517GHSA-6h9x-2p3x-8j6g

cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metachar…

Published Mar 30, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

References

aztech-adsl224-interface-command-execution(41492) vdb-entry
29551 third-party-advisory
20080326 Aztech ADSL2/2+ 4 Port remote root mailing-list
http://core.ifconfig.se/~core/?p=21
28458 vdb-entry
44267 vdb-entry