CVE-2020-13976 - CVE House
Back to Database
Status published High CVE-2020-13976

An issue was discovered in DD-WRT through 16214. The Diagnostic...

Vulnerability Description

An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it refers to an old software version, requires administrative privileges, and does not provide access beyond that already available to administrative users

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-13976

Credits & Attribution

No credits recorded in the NVD database.

References

More from dd-wrt

View All →
CVE-2012-6297
Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2...
High 8.8
CVE-2009-2766
httpd.c in httpd in the management GUI in DD-WRT 24...
High 7.5
CVE-2009-2765
httpd.c in httpd in the management GUI in DD-WRT 24...
High 8.3
CVE-2008-6975
Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT...
Medium 6.8
CVE-2008-6974
Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT...
Medium 6.8

Affected Vendor

Affected Software

dd-wrt
Vulnerable Versions:
0

Timeline

Official Publish: June 9th, 2020
Last Modified: November 18th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.