Vulnerability Details CVE-2012-6297
Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious user cause a Denial of Service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 74.1%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.3
References
- https://lists.openwall.net/bugtraq/2013/07/12/2
- https://packetstormsecurity.com/files/cve/CVE-2012-6297
- https://seclists.org/fulldisclosure/2013/Oct/241
- https://vuldb.com/?id.9527
- https://lists.openwall.net/bugtraq/2013/07/12/2
- https://packetstormsecurity.com/files/cve/CVE-2012-6297
- https://seclists.org/fulldisclosure/2013/Oct/241
- https://vuldb.com/?id.9527