← Database

CVE-2009-5157

HIGH CVSS: 8.8 Published: 2019-06-11 Modified: 2026-06-16

Description

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4_ping_ipaddr variable.

Affected Platforms

Linksys Wag54G2Linksys Wag54G2 Firmware

Weakness Type

CWE-77

References