CVE coverage
View on NVD →
CVE-2009-2765
CVSS 8.3
2 detections found
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET WEB_SERVER Possible DD-WRT Metacharacter Injection Command Execution Attempt | rev 10 | 2024-03-06 |
| snort | ET WEB_SERVER Possible DD-WRT Metacharacter Injection Command Execution Attempt | rev 8 | 2011-01-15 |