10
CVE-2011-4502
- EPSS 2.6%
- Published 22.11.2011 11:55:05
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers to execute arbitrary commands via shell metacharacters.
Data is provided by the National Vulnerability Database (NVD)
Edimax ≫ Br-6104k Router Firmware Version3.21
Canyon-tech ≫ Cn-wf512 Router Firmware Version1.83
Canyon-tech ≫ Cn-wf514 Router Firmware Version2.08
Canyon-tech ≫ Cn-wf512 Version-
Canyon-tech ≫ Cn-wf514 Version-
Edimax ≫ 6114wg Router Firmware Version1.83
Edimax ≫ 6114wg Router Firmware Version2.08
Sitecom ≫ Wl-153 Router Firmware Version1.31
Sitecom ≫ Wl-153 Router Firmware Version1.34
Sweex ≫ Lb000021 Router Firmware Version3.15
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.6% | 0.851 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.