Unscored CVE-2012-6297 EUVD-2012-6152GHSA-2r5w-qhv2-w8xr

Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-charac…

Published Feb 6, 2020 · Updated Aug 6, 2024 · Assigned by mitre

Description

Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious user cause a Denial of Service.

References

https://packetstormsecurity.com/files/cve/CVE-2012-6297
https://vuldb.com/?id.9527
[CVE-2012-6297] DD-WRT v24-sp2 Command Injection mailing-list
CVE-2012-6297 - Command Injection via CSRF on DD-WRT v24-sp2 mailing-list