CVE-2008-6554 - Vulnerability Details - OpenCVE

cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Aztech	Adsl2\/2\+4-port Router

Configuration 1 [-]

cpe:2.3:h:aztech:adsl2\/2\+4-port_router:3.7.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://core.ifconfig.se/~core/?p=21
http://osvdb.org/44267
http://secunia.com/advisories/29551
http://www.securityfocus.com/archive/1/490100/100/0/threaded
http://www.securityfocus.com/bid/28458
https://exchange.xforce.ibmcloud.com/vulnerabilities/41492

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-03-30T20:00:00

Updated: 2024-08-07T11:34:46.915Z

Reserved: 2009-03-30T00:00:00

Link: CVE-2008-6554

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2009-03-30T20:30:00.843

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-6554

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-03-26T00:00:00", "descriptions": [{"lang": "en", "value": "cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-11T19:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "aztech-adsl224-interface-command-execution(41492)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41492"}, {"name": "29551", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29551"}, {"name": "20080326 Aztech ADSL2/2+ 4 Port remote root", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/490100/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://core.ifconfig.se/~core/?p=21"}, {"name": "28458", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/28458"}, {"name": "44267", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/44267"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-6554", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "aztech-adsl224-interface-command-execution(41492)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41492"}, {"name": "29551", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29551"}, {"name": "20080326 Aztech ADSL2/2+ 4 Port remote root", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/490100/100/0/threaded"}, {"name": "http://core.ifconfig.se/~core/?p=21", "refsource": "MISC", "url": "http://core.ifconfig.se/~core/?p=21"}, {"name": "28458", "refsource": "BID", "url": "http://www.securityfocus.com/bid/28458"}, {"name": "44267", "refsource": "OSVDB", "url": "http://osvdb.org/44267"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T11:34:46.915Z"}, "title": "CVE Program Container", "references": [{"name": "aztech-adsl224-interface-command-execution(41492)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41492"}, {"name": "29551", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/29551"}, {"name": "20080326 Aztech ADSL2/2+ 4 Port remote root", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/490100/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://core.ifconfig.se/~core/?p=21"}, {"name": "28458", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/28458"}, {"name": "44267", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/44267"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-6554", "datePublished": "2009-03-30T20:00:00", "dateReserved": "2009-03-30T00:00:00", "dateUpdated": "2024-08-07T11:34:46.915Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:aztech:adsl2\\/2\\+4-port_router:3.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "157895CB-5A1A-4D7D-9BF1-1743F8BBC518", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string."}, {"lang": "es", "value": "cgi-bin/script en el router Aztech ADSL2/2+ 4-port v3.7.0 build 070426 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n utilizando caracteres especiales del interprete de comandos en una cadena de consulta."}], "id": "CVE-2008-6554", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-03-30T20:30:00.843", "references": [{"source": "cve@mitre.org", "url": "http://core.ifconfig.se/~core/?p=21"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://osvdb.org/44267"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/29551"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/490100/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/28458"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41492"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://core.ifconfig.se/~core/?p=21"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://osvdb.org/44267"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/29551"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/490100/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/28458"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41492"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}