packetstormsecurity.com
http://packetstormsecurity.com/files/129374/ADSL2-2.05.C29GV-XSS-URL-Redirect-Command-Injection.html CVE-2014-9144
Technicolor DT5130 2.05.C29GV - Multiple Vulnerabilities
Record summary
CVE-2014-9144 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field (setobject_ip parameter).
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBTechnicolor DT5130 2.05.C29GV - Multiple VulnerabilitiesExploitDB exploitby CrashNot analyzed1 file
References
435462exploit
http://www.exploit-db.com/exploits/35462 20141203 Wireless N ADSL 2/2+ Modem Router - DT5130 - Xss / URL Redirect / Command Injectionmailing list
http://www.securityfocus.com/archive/1/534143/100/0/threaded nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-9144