CVE-2009-5157 - On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4_ping_ipaddr variable

HIGH

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4_ping_ipaddr variable

Published Jun 11, 2019

8.8

HIGH

CVSS 3.0

EPSS 5.83%

On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4_ping_ipaddr variable.

No remediation recorded yet.

Weaknesses (1)

CWE-77

https://www.securityfocus.com/archive/1/503934
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.securityfocus.com/bid/35142
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://www.securityfocus.com/archive/1/503934		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.securityfocus.com/bid/35142		x_refsource_MISCThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 11, 2019

Updated Aug 7, 2024

Reserved Jun 11, 2019

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a