← back
CVE-2009-2766

CVE-2009-2766

EPSS 5.1%
httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/9209unverifiedexploitdbwww.exploit-db.com/exploits/9209unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=55173http://www.exploit-db.com/exploits/9209