Signature Detail
Short Name |
HTTP:CISCO:LINKSYS-CMD-INJ |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Cisco Linksys WRT54GL Command Injection |
Release Date |
2013/01/24 |
Update Number |
2228 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Cisco Linksys WRT54GL Command Injection
This signature detects attempts to exploit a known command injection vulnerability in Cisco Linksys WRT54GL. It is due to improper input filtering. In a successful code injection attack, the behavior of the target host is entirely dependent on the intended function of the injected code and executes within the security context of the process.
References
- BugTraq: 57459