CVE-2012-6297 in DD-WRT
Summary
Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious user cause a Denial of Service.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
12/06/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9527 | DD-WRT Web cross-site request forgery | 352 | Unproven | Not defined | CVE-2012-6297 |