Approved changes feed: RSS · Atom

cpe:2.3:o:dd-wrt:dd-wrt:24:sp2:*:*:*:*:*:*

part: o version: 24 update: sp2

VendorDd Wrt (05369f29-0ccf-51ef-a2ed-a4046dca8b84)
ProductDd Wrt (869199c6-c2a5-5b9a-9bd0-f64ca7e5e877)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/gumbie/dd-wrt purl2cpe 2026-06-01 10:10:57.453884
pkg:github/mirror/dd-wrt purl2cpe 2026-06-01 10:10:57.453886

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-6297 vulnerable 2026-06-08 05:02:59.880963 Details available
Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious user cause a Denial of Service.
Published: 2020-02-06T17:01:25.000Z
Updated: 2024-08-06T21:28:39.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.