DD
Vendor
DD-WRT
8
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-27137 In wildKEV | DD DD-WRT DD-WRT | 8.1 | Jul 16 | DD-WRT Stack-Based Buffer Overflow Vulnerability |
| CVE-2022-27631 | DD DD-WRT DD-WRT | 9.8 | Aug 5 | A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599 |
| CVE-2020-13976 | DD Dd-wrt Dd-wrt | 8.8 | Jun 9 | An issue was discovered in DD-WRT through 16214 |
| CVE-2012-6297 | DD Dd-wrt Dd-wrt | 8.8 | Feb 6 | Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious… |
| CVE-2009-2766 | DD Dd-wrt Dd-wrt | – | Aug 14 | httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change… |
| CVE-2009-2765 | DD Dd-wrt Dd-wrt | – | Aug 14 | httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a… |
| CVE-2008-6975 | DD Dd-wrt Dd-wrt | – | Aug 14 | Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that… |
| CVE-2008-6974 | DD Dd-wrt Dd-wrt | – | Aug 14 | Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for… |