dd-wrt kayıtları
dd-wrt üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %12,5
- Silahlaştırılmış
- 2 · %25
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 5 gün
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-121 Stack-based Buffer Overflow1
- CWE-20 Improper Input Validation1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-787 Out-of-bounds Write1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
63Bu hafta | CVE-2021-27137Silahlaştırılmış | An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724.dd-wrt · dd-wrt · CWE-121 | Yüksek8,1 | KEV | %4,0 | 16 Tem 2026 |
58Planlayın | CVE-2009-2765Silahlaştırılmış | httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrarydd-wrt · dd-wrt · CWE-20 | Yüksek8,3 | — | %82,5 | 14 Ağu 2009 |
39İzleyin | CVE-2022-27631İstismar yok | A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599.dd-wrt · dd-wrt · CWE-787 | Kritik9,8 | — | %1,1 | 5 Ağu 2022 |
36İzleyin | CVE-2020-13976İstismar yok | An issue was discovered in DD-WRT through 16214.dd-wrt · dd-wrt · CWE-78 | Yüksek8,8 | — | %1,8 | 9 Haz 2020 |
36İzleyin | CVE-2012-6297İstismar yok | Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-charactdd-wrt · dd-wrt · CWE-352 | Yüksek8,8 | — | %1,7 | 6 Şub 2020 |
32İzleyin | CVE-2009-2766Kavram kanıtı | httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which aldd-wrt · dd-wrt · CWE-264 | Yüksek7,5 | — | %5,1 | 14 Ağu 2009 |
27İzleyin | CVE-2008-6974Kavram kanıtı | Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the audd-wrt · dd-wrt · CWE-352 | Orta6,8 | — | %1,5 | 14 Ağu 2009 |
27İzleyin | CVE-2008-6975Kavram kanıtı | Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authenticationdd-wrt · dd-wrt · CWE-352 | Orta6,8 | — | %1,3 | 14 Ağu 2009 |
- CVE-2021-2713763Bu hafta
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724.
YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %4dd-wrt · dd-wrt16 Tem 2026
- CVE-2009-276558Planlayın
httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary
YüksekCVSS 8,3SilahlaştırılmışEPSS %83dd-wrt · dd-wrt14 Ağu 2009
- CVE-2022-2763139İzleyin
A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599.
KritikCVSS 9,8İstismar yokEPSS %1dd-wrt · dd-wrt5 Ağu 2022
- CVE-2020-1397636İzleyin
An issue was discovered in DD-WRT through 16214.
YüksekCVSS 8,8İstismar yokEPSS %2dd-wrt · dd-wrt9 Haz 2020
- CVE-2012-629736İzleyin
Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-charact
YüksekCVSS 8,8İstismar yokEPSS %2dd-wrt · dd-wrt6 Şub 2020
- CVE-2009-276632İzleyin
httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which al
YüksekCVSS 7,5Kavram kanıtıEPSS %5dd-wrt · dd-wrt14 Ağu 2009
- CVE-2008-697427İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the au
OrtaCVSS 6,8Kavram kanıtıEPSS %1dd-wrt · dd-wrt14 Ağu 2009
- CVE-2008-697527İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication
OrtaCVSS 6,8Kavram kanıtıEPSS %1dd-wrt · dd-wrt14 Ağu 2009