CVE-2010-2261

EPSS 1.69%
Veröffentlicht 10.06.2010 00:30:11
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) data2 and (2) data3 parameters to (a) Debug_command_page.asp and (b) debug.cgi.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linksys ≫ Wap54gv3 Version <= 3.04.03

Linksys ≫ Wap54gv3 Version3.05.03

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.69%	0.817

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://www.securityfocus.com/archive/1/511733/100/0/threaded

https://nvd.nist.gov/vuln/detail/CVE-2010-2261

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-2261

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-2261

EUVD