CVE-2009-5157

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4pingipaddr variable...

CVE-2009-5157

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:29+00:00| seen| https://t.me/cibsecurity/4852 2019-06-17 16:58:08+00:00| seen| https://t.me/cibsecurity/4941...

CVE-2009-5157

The Linksys WAG54G2 running firmware version 1.00.10 is vulnerable to an authenticated command injection flaw. The issue stems from the lack of proper neutralization of shell metacharacters within the c4_ping_ipaddr variable located in the setup.cgi file. An attacker with authenticated access can...