What’s Vulnerable › Vulnerabilities

CVE-2011-4182: shell code injection via ESSID because of missing escaping of a variable

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-12 · updated 2026-06-16
• Weakness: CWE-77

Description

Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.

Affected products

• SUSE Linux Enterprise sysconfig: through 0.83.7

References

• https://bugzilla.suse.com/show_bug.cgi?id=735394
• https://www.suse.com/security/cve/CVE-2017-15710/
• https://bugzilla.suse.com/show_bug.cgi?id=735394
• https://www.suse.com/security/cve/CVE-2017-15710/

Get alerted when CVE-2011-4182 or the next vulnerability affects your stack