Linksys WAG54G2 Web Management Console Remote Arbitrary Shell Command Injection Vulnerability
BID:35142
CVE-2009-5157 |Info
Linksys WAG54G2 Web Management Console Remote Arbitrary Shell Command Injection Vulnerability
| Bugtraq ID: | 35142 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 15 2009 12:00AM |
| Updated: | Jun 01 2009 04:29PM |
| Credit: | Michal Sajdak |
| Vulnerable: |
Linksys Wireless-G ADSL2+ Gateway WAG54G2 1.0.10 (Firmware) |
| Not Vulnerable: | |
Discussion
Linksys WAG54G2 Web Management Console Remote Arbitrary Shell Command Injection Vulnerability
Linksys WAG54G2 router is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data.
Remote attackers can exploit this issue to execute arbitrary shell commands with superuser privileges. This may facilitate a complete compromise of the affected device.
Linksys WAG54G2 with firmware V1.00.10 is affected; other versions may also be vulnerable.
UPDATE (May 29, 2009): The reporter indicates that this issue may not be remotely exploitable if the administrator credentials have been changed from the default values.
Linksys WAG54G2 router is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data.
Remote attackers can exploit this issue to execute arbitrary shell commands with superuser privileges. This may facilitate a complete compromise of the affected device.
Linksys WAG54G2 with firmware V1.00.10 is affected; other versions may also be vulnerable.
UPDATE (May 29, 2009): The reporter indicates that this issue may not be remotely exploitable if the administrator credentials have been changed from the default values.
Exploit / POC
Linksys WAG54G2 Web Management Console Remote Arbitrary Shell Command Injection Vulnerability
To exploit these issues, attackers may use a browser or readily available network utilities.
The following proof of concept is available:
To exploit these issues, attackers may use a browser or readily available network utilities.
The following proof of concept is available:
Solution / Fix
Linksys WAG54G2 Web Management Console Remote Arbitrary Shell Command Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Linksys WAG54G2 Web Management Console Remote Arbitrary Shell Command Injection Vulnerability
References:
References: