CVE-2017-14135

Critical

Published: 04/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The webadmin plugin for opendreambox 2.0.0 contains a vulnerability that allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.

Risk Assessment

An attacker could exploit this vulnerability to gain control over the system, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update the webadmin plugin to the latest version and implement appropriate input filtering to block shell metacharacters.

Original NVD description (English source)

enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.