Vulnerability Details CVE-2008-6554
cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.032
EPSS Ranking 86.6%
CVSS Severity
CVSS v2 Score 10.0
References
- http://core.ifconfig.se/~core/?p=21
- http://osvdb.org/44267
- http://secunia.com/advisories/29551
- http://www.securityfocus.com/archive/1/490100/100/0/threaded
- http://www.securityfocus.com/bid/28458
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41492
- http://core.ifconfig.se/~core/?p=21
- http://osvdb.org/44267
- http://secunia.com/advisories/29551
- http://www.securityfocus.com/archive/1/490100/100/0/threaded
- http://www.securityfocus.com/bid/28458
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41492
Products affected by CVE-2008-6554
-
cpe:2.3:h:aztech:adsl2/2+4-port_router:3.7.0