CVE-2015-5082: Command Injection
Published Sep 28, 2015
·Updated
Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEWPASSWORD1 or (2) NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi.
Affected Software
1 affected component
Endian Firewall Endian Firewall<=2.5.1
Event History
Sep 28, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5082?
CVE-2015-5082 is classified as a high severity vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2015-5082?
To fix CVE-2015-5082, upgrade to Endian Firewall version 3.0 or later.
3
What are the potential impacts of CVE-2015-5082?
The potential impacts of CVE-2015-5082 include unauthorized remote command execution on the affected system.
4
What parameters are exploited in CVE-2015-5082?
CVE-2015-5082 is exploited through shell metacharacters in the NEW_PASSWORD_1 or NEW_PASSWORD_2 parameters.
5
Which versions of Endian Firewall are affected by CVE-2015-5082?
Endian Firewall versions prior to 3.0, including all versions before 2.5.1, are vulnerable to CVE-2015-5082.