Dd Wrt

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:dd-wrt:dd-wrt:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDd Wrt (05369f29-0ccf-51ef-a2ed-a4046dca8b84)
ProductDd Wrt (869199c6-c2a5-5b9a-9bd0-f64ca7e5e877)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/gumbie/dd-wrt purl2cpe 2026-06-01 10:10:57.453876
pkg:github/mirror/dd-wrt purl2cpe 2026-06-01 10:10:57.453877

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27631 vulnerable 2026-06-08 05:42:42.522633 Details available
MEDIUM (5.3)
A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.
Published: 2022-08-05T21:19:29.848Z
Updated: 2025-04-15T18:53:26.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13976 vulnerable 2026-06-08 05:18:01.660870 Details available
An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it refers to an old software version, requires administrative privileges, and does not provide access beyond that already available to administrative users
Published: 2020-06-09T13:07:18.000Z
Updated: 2024-11-18T17:28:39.274Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.