CVE-2009-2766

httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote…

published August 14, 2009

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote attackers to change settings via HTTP requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05129 · 92.4th percentile
Published
2009-08-14T15:00Z
EPSS history
Timeline
  • 14 AUG 15:00Z
    httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remote…
    cvelistv5