CVE-2013-5946

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "Ping or Trace an IP Address" or (2) "Perform a DNS Lookup" section.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

6.52% chance of exploitation in the next 30 days, 93th percentile

Published

2013-12-19

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/30061

References

• CVE Record
• NVD entry

Related

• CVE-2013-5945
• CVE-2013-5948
• CVE-2013-5917
• CVE-2013-5954
• CVE-2013-5912
• CVE-2013-5961