It is possible to download the exploit at. Technical details and also a public exploit are known.Ī public exploit has been developed in Ruby and been published immediately after the advisory. The exploitation doesn't need any form of authentication. The attack can only be done within the local network. This vulnerability is known as CVE-2009-2765 since. As an impact it is known to affect confidentiality, integrity, and availability. Properties that are required to process the data safely andĬorrectly. Not validate or incorrectly validates that the input has the The product receives input or data, but it does The CWE definition for the vulnerability is CWE-20. The manipulation with an unknown input leads to a privilege escalation vulnerability.

Affected by this vulnerability is an unknown functionality of the file httpd.c.

A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability was found in DD-WRT 24.

The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time. Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.

Dd wrt v24 source code