7.8

CVE-2008-2636

The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service (management interface outage) or possibly execute arbitrary code via a URI that begins with a "/./" sequence, contains many instances of a "front_page" sequence, and ends with a ".asp" sequence.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Linksys Wrh54g Router Version1.01.03
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.4% 0.873
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/30562
http://securityreason.com/securityalert/3929
http://www.securityfocus.com/archive/1/493129/100/0/threaded
http://www.securitytracker.com/id?1020237
http://www.vupen.com/english/advisories/2008/1772/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42890