{"cvss":0.0,"datePublished":"2019-06-13T00:00:00Z","dateUpdated":"2019-06-13T00:00:00Z","description":"httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a cgi-bin/ URI.","dueDate":"","id":"CVE-2009-2765","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"DD-WRT","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"DD-WRT DD-WRT Improper Input Validation","vendor":"DD-WRT"}