Lucene search
HistoryAug 14, 2009 - 3:16 p.m.
CVE-2009-2766
dd-wrt
24 sp1
httpd
management gui
remote attackers
settings
http requests
7.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
75.0%
httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests.
Affected configurations
Node
dd-wrtdd-wrtMatch24sp1
| CPE | Name | Operator | Version |
|---|---|---|---|
| dd-wrt:dd-wrt | dd-wrt | eq | 24 |
Related
prion
prion
Design/Logic Flaw
2009-08-14 15:16:00
nvd
nvd
CVE-2009-2766
2009-08-14 15:16:27
cvelist
cvelist
CVE-2009-2766
2009-08-14 15:00:00
7.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
75.0%
Related for CVE-2009-2766