EUVD-2009-5111

Malware in sbrugna...

CVE-2009-5157

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4pingipaddr variable...

VulnCheck KEV: CVE-2009-5157

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4pingipaddr variable...

Command injection

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4pingipaddr variable...

CVE-2009-5157

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4pingipaddr variable...

CVE-2009-5157

The CVE-2009-5157 entry applies to Linksys WAG54G2 devices running firmware 1.00.10. The issue is an authenticated command injection in the setup.cgi c4_ping_ipaddr variable, allowing shell metacharacter usage to execute arbitrary commands. Documented impacts indicate high severity (CVSS) with ne...

CVE-2009-5157

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4pingipaddr variable...

Linksys WAG54G2 Web Console Command Execution

Linksys WAG54G2 router is a popular SOHO class device. It provides ADSL / WiFi / Ethernet interfaces. 2. When logged into web management console, it is possible to execute commands as root tested on firmware: V1.00.10. 3. PoC: GET...

Linksys WAG54G2 Web Management Console Arbitrary Command Exec

No description provided by source. 1. Linksys WAG54G2 router is a popular SOHO class device. It provides ADSL / WiFi / Ethernet interfaces. 2. When logged into web management console, it is possible to execute commands as root tested on firmware: V1.00.10. 3. PoC: GET...

Linksys WAG54G2 Web Management Console Arbitrary Command Exec

Exploit for hardware platform in category local exploits ============================================================= Linksys WAG54G2 Web Management Console Arbitrary Command Exec ============================================================= 1. Linksys WAG54G2 router is a popular SOHO class...

Linksys WAG54G2 commands injection

It's possible to inject command via Web interface...

Linksys WAG54G2 Web Management Console Local Arbitrary Shell Command Injection Vulnerability

Linksys WAG54G2 router is a popular SOHO class device. It provides ADSL / WiFi / Ethernet interfaces. 2. When logged into web management console, it is possible to execute commands as root tested on firmware: V1.00.10. 3. PoC: GET...

Linksys WAG54G2 - Web Management Console Arbitrary Command Execution

Linksys WAG54G2 - Web Management Console Arbitrary Command Execution 1. Linksys WAG54G2 router is a popular SOHO class device. It provides ADSL / WiFi / Ethernet interfaces. 2. When logged into web management console, it is possible to execute commands as root tested on firmware: V1.00.10. 3. PoC...

Linksys WAG54G2 - Web Management Console Arbitrary Command Execution

Linksys WAG54G2 router is a popular SOHO class device. It provides ADSL / WiFi / Ethernet interfaces. 2. When logged into web management console, it is possible to execute commands as root tested on firmware: V1.00.10. 3. PoC: GET...

DSL router remotely controlled by URL

From The H Security Security researcher Michal Sajdak revealed at CONFidence 2009 in Krakow in mid-May that it’s relatively easy to make the Linksys WAG54G2 WLAN DSL router execute arbitrary shell commands. He has now published securitum.pl further details. Sajdak discovered that it’s easy to add...