CVE-2008-6554

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-03-30 · updated 2026-06-16
Weakness: CWE-78

Description

cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

Affected products

Aztech Adsl2/2+4-Port Router: 3.7.0

References

http://core.ifconfig.se/~core/?p=21
http://osvdb.org/44267
http://secunia.com/advisories/29551
http://www.securityfocus.com/archive/1/490100/100/0/threaded
http://www.securityfocus.com/bid/28458
https://exchange.xforce.ibmcloud.com/vulnerabilities/41492
http://core.ifconfig.se/~core/?p=21
http://osvdb.org/44267
http://secunia.com/advisories/29551
http://www.securityfocus.com/archive/1/490100/100/0/threaded
http://www.securityfocus.com/bid/28458
https://exchange.xforce.ibmcloud.com/vulnerabilities/41492

Get alerted when CVE-2008-6554 or the next vulnerability affects your stack