nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2009-5156 CVE-2009-5156
CRITICAL
veracomp asmax_ar-804gu_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')
Record summary
CVE-2009-5156 has a selected CVSS score of 9.8 (critical).
Description
An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Jun 13, 2019 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
asmax_ar-804gu_firmwareBrowse veracomp / asmax_ar-804gu_firmware | VulnCheck | Version data not supplied | |
References
3securityfocus.com
https://www.securityfocus.com/archive/1/503946 securityfocus.com
https://www.securityfocus.com/bid/35153