CVE-2008-6554 cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
HighCVSS 10.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aztech adsl22+4-port router | = 3.7.0 | No fix listed |
References
- core.ifconfig.se
- 44267 exploit vdb-entry
- 29551 third-party-advisory vendor-advisory
- 20080326 Aztech ADSL2/2+ 4 Port remote root mailing-list
- 28458 exploit vdb-entry
- aztech-adsl224-interface-command-execution(41492) vdb-entry