Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-33183 State: PUBLISHED Published: 2025-11-18T16:57:19.482Z Last Updated: 2025-11-18T18:25:11.004Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Isaac-GR00T N1.5 Problem Types: CWE-94 Description: NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33183 - https://www.cve.org/CVERecord?id
CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33183 - https://www.cve.org/CVERecord?id=CVE-2025-33183 - https://nvidia.custhelp.com/app/answers/detail/a_id/5725
CVE ID: CVE-2025-33184 State: PUBLISHED Published: 2025-11-18T16:57:43.346Z Last Updated: 2025-11-19T14:19:17.511Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Isaac-GR00T N1.5 Problem Types: CWE-94 Description: NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33184 - https://www.cve.org/CVERecord?id
CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33184 - https://www.cve.org/CVERecord?id=CVE-2025-33184 - https://nvidia.custhelp.com/app/answers/detail/a_id/5725
CVE ID: CVE-2025-33185 State: PUBLISHED Published: 2025-11-11T16:19:46.932Z Last Updated: 2025-11-14T17:40:44.053Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: NVIDIA Products: AuthN component of NVIDIA AIStore Problem Types: CWE-862 Description: NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33185 - https://www.cve.org/CVERecord?id=CVE-2025-33185 - https://nvidia.custhelp.com/app/answers/detail/a_id/5724
CVE ID: CVE-2025-33186 State: PUBLISHED Published: 2025-11-11T16:20:14.324Z Last Updated: 2025-11-14T17:39:09.718Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: AuthN component of NVIDIA AIStore Problem Types: CWE-798 Description: NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33186 - https://www.cve.org/CVERecord?id=CVE-2025-33186 - https://nvidia.custhelp.com/app/answers/detail/a_id/5724
CVE ID: CVE-2025-33202 State: PUBLISHED Published: 2025-11-11T16:19:13.676Z Last Updated: 2025-11-12T20:51:58.926Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-121 Description: NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-33202 - https://www.cve.org/CVERecord?id=CVE-2025-33202 - https://nvidia.custhelp.com
/nvd.nist.gov/vuln/detail/CVE-2025-33202 - https://www.cve.org/CVERecord?id=CVE-2025-33202 - https://nvidia.custhelp.com/app/answers/detail/a_id/5723
CVE ID: CVE-2025-34021 State: PUBLISHED Published: 2025-06-20T18:37:00.916Z Last Updated: 2025-11-20T21:28:44.306Z Vendors: Selea Products: Targa IP OCR-ANPR Camera Problem Types: CWE-918, CWE-20 Description: A server-side request forgery (SSRF) vulnerability exists in multiple Selea Targa IP OCR-ANPR camera models, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The application fails to validate user-supplied input in JSON POST parameters such as ipnotify_address and url, which are used by internal mechanisms to perform image fetch and DNS lookups. This allows remote unauthenticated attackers to induce the system
nal mechanisms to perform image fetch and DNS lookups. This allows remote unauthenticated attackers to induce the system to make arbitrary HTTP requests to internal or external systems, potentially bypassing firewall policies or conducting internal service enumeration. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-25 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5617.php - https://www.exploit-db.com/exploits/49457 - https://cxsecurity.com/issue/WLB-2021010170 - https://packetstorm.news/files/id/161059 - https://www.selea.com - https://vulncheck.com/advisories/selea-targa-ip-camera-ss
s://packetstorm.news/files/id/161059 - https://www.selea.com - https://vulncheck.com/advisories/selea-targa-ip-camera-ssrf
CVE ID: CVE-2025-34022 State: PUBLISHED Published: 2025-06-20T18:37:23.460Z Last Updated: 2025-11-20T21:27:15.482Z Vendors: Selea Products: Targa IP OCR-ANPR Camera Problem Types: CWE-22 Description: A path traversal vulnerability exists in multiple models of Selea Targa IP OCR-ANPR cameras, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The /common/get_file.php script in the “Download Archive in Storage” page fails to properly validate user-supplied input to the file parameter. Unauthenticated remote attackers can exploit this vulnerability to read arbitrary files on the device, including sensitive system files
remote attackers can exploit this vulnerability to read arbitrary files on the device, including sensitive system files containing cleartext credentials, potentially leading to authentication bypass and exposure of system information. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5616.php - https://packetstorm.news/files/id/161057 - https://cxsecurity.com/issue/WLB-2021010165 - https://www.exploit-db.com/exploits/49456 - https://www.selea.com - https://vulncheck.com/advisories/selea-targa-ip-camera-path-traversal
CVE ID: CVE-2025-34023 State: PUBLISHED Published: 2025-06-20T18:37:45.496Z Last Updated: 2025-11-20T21:26:20.450Z Vendors: Karel Products: Karel IP Phone IP1211 Problem Types: CWE-22 Description: A path traversal vulnerability exists in the Karel IP1211 IP Phone's web management panel. The /cgi-bin/cgiServer.exx endpoint fails to properly sanitize user input to the page parameter, allowing remote authenticated attackers to access arbitrary files on the underlying system by using crafted path traversal sequences. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/202
tion on 2025-02-02 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20201020023943/https://www.karel.com.tr/urun-cozum/ip1211-ip-telefon - https://cxsecurity.com/issue/WLB-2020100038 - https://www.exploit-db.com/exploits/48857 - https://vulncheck.com/advisories/selea-targa-ip-camera-path-traversal
CVE ID: CVE-2025-34024 State: PUBLISHED Published: 2025-06-20T18:38:02.885Z Last Updated: 2025-11-20T21:24:54.654Z Vendors: Edimax Products: Edimax EW-7438RPn Mini Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacters to achieve arbitrary command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
observed by the Shadowserver Foundation on 2024-09-14 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/ - https://www.exploit-db.com/exploits/48377 - https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=32163 - https://vulncheck.com/advisories/edimax-ew-7438rpn-command-injections
CVE ID: CVE-2025-34025 State: PUBLISHED Published: 2025-05-21T22:11:32.081Z Last Updated: 2025-05-28T03:56:02.808Z Vendors: Versa Products: Concerto Problem Types: CWE-732 Description: The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host paths. The escape can be used to trigger remote code execution or direct host access depending on the host operating system configuration.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment:
to from 12.1.2 through 12.2.0. Additional versions may be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://projectdiscovery.io/blog/versa-concerto-authentication-bypass-rce
CVE ID: CVE-2025-34026 State: PUBLISHED Published: 2025-05-21T22:04:58.832Z Last Updated: 2025-09-23T15:44:01.227Z Vendors: Versa Products: Concerto Problem Types: CWE-288 Description: The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap dumps and trace logs.This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://projectdiscovery.io/blog/versa-concerto-authentication-b
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://projectdiscovery.io/blog/versa-concerto-authentication-bypass-rce
CVE ID: CVE-2025-34027 State: PUBLISHED Published: 2025-05-21T21:58:31.698Z Last Updated: 2025-09-23T15:44:45.971Z Vendors: Versa Products: Concerto Problem Types: CWE-367 Description: The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The Spack upload endpoint can be leveraged for a Time-of-Check to Time-of-Use (TOCTOU) write in combination with a race condition to achieve remote code execution via path loading manipulation, allowing an unauthenticated actor to achieve remote code execution (RCE).This issue is known to affect Concerto from 12.1.2 throu
an unauthenticated actor to achieve remote code execution (RCE).This issue is known to affect Concerto from 12.1.2 through 12.2.0. Additional versions may be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://projectdiscovery.io/blog/versa-concerto-authentication-bypass-rce
CVE ID: CVE-2025-34028 State: PUBLISHED Published: 2025-04-22T16:32:23.446Z Last Updated: 2025-11-04T22:34:09.795Z Vendors: Commvault Products: Command Center Innovation Release Problem Types: CWE-22, CWE-306 Description: The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP. This issue affects Command Center Innovation Release: 11.38.0 to 11.38.20. The vulnerability is fixed in 11.38.20 with SP38-CU20-433 and SP38-CU20-436 and also fixed in 11.38.25 with SP38-CU25-434
e vulnerability is fixed in 11.38.20 with SP38-CU20-433 and SP38-CU20-436 and also fixed in 11.38.25 with SP38-CU25-434 and SP38-CU25-438. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commvault.com/securityadvisories/CV_2025_04_1.html - https://labs.watchtowr.com/fire-in-the-hole-were-breaching-the-vault-commvault-remote-code-execution-cve-2025-34028/ - https://github.com/watchtowrlabs/watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028 - https://www.vulncheck.com/advisories/commvault-command-center-innovation-release-unauthenticated-install-package-path-traversal
CVE ID: CVE-2025-34029 State: PUBLISHED Published: 2025-06-20T18:38:15.689Z Last Updated: 2025-11-20T21:25:52.458Z Vendors: Edimax Products: Edimax EW-7438RPn Mini Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated attacker can submit arbitrary shell commands directly, resulting in command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2024-09-14 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: R
ence was observed by the Shadowserver Foundation on 2024-09-14 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/global/wi-fi_range_extenders_n300/ew-7438rpn_mini/ - https://www.exploit-db.com/exploits/48377 - https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=32163 - https://vulncheck.com/advisories/edimax-ew-7438rpn-command-injections
CVE ID: CVE-2025-34030 State: PUBLISHED Published: 2025-06-20T18:40:04.545Z Last Updated: 2025-11-20T21:23:36.565Z Vendors: sar2html Products: sar2html Problem Types: CWE-78 Description: An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject shell commands by appending them to the plot parameter (e.g., ?plot=;id) in a crafted GET request. The output of the command is displayed in the application's interface after interacting with the host selection UI. Successful exploitation leads to arbit
ayed in the application's interface after interacting with the host selection UI. Successful exploitation leads to arbitrary command execution on the underlying system. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cemtan/sar2html - https://www.exploit-db.com/exploits/47204 - https://www.fortiguard.com/encyclopedia/ips/48624 - https://vulncheck.com/advisories/sar2html-command-injection
CVE ID: CVE-2025-34031 State: PUBLISHED Published: 2025-06-24T00:58:57.345Z Last Updated: 2025-11-20T21:21:11.446Z Vendors: Moodle Products: Jmol Plugin Problem Types: CWE-22 Description: A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user input to the file_get_contents() function without proper validation, allowing attackers to read arbitrary files from the server's filesystem by crafting a malicious query value. This vulnerability can be exploited without authentication and may expose sensitive configuration data, including database credentials. Exploitation evidence was observed by
tion and may expose sensitive configuration data, including database credentials. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dionach.com/moodle-jmol-plugin-multiple-vulnerabilities/ - https://www.exploit-db.com/exploits/46881 - https://vulncheck.com/advisories/moodle-lms-jmol-plugin-path-traversal
CVE ID: CVE-2025-34032 State: PUBLISHED Published: 2025-06-24T00:59:26.844Z Last Updated: 2025-11-20T21:22:13.507Z Vendors: Moodle Products: Jmol Plugin Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript in the victim's browser by crafting a malicious link. This can be used to hijack user sessions or manipulate page content. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC. Addi
ns or manipulate page content. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dionach.com/moodle-jmol-plugin-multiple-vulnerabilities/ - https://www.exploit-db.com/exploits/46881 - https://vulncheck.com/advisories/moodle-lms-jmol-plugin-xss
CVE ID: CVE-2025-34033 State: PUBLISHED Published: 2025-06-24T00:59:49.874Z Last Updated: 2025-11-20T21:18:30.076Z Vendors: 5VTechnologies Products: Blue Angel Software Suite Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the ping_addr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can inject arbitrary commands by appending shell metacharacters to the ping_addr parameter in a crafted GET request to /cgi-bin/webctrl.cgi?action=pingtest_update. The command's output is reflecte
addr parameter in a crafted GET request to /cgi-bin/webctrl.cgi?action=pingtest_update. The command's output is reflected in the application's web interface, enabling attackers to view results directly. Default and backdoor credentials can be used to access the interface and exploit the issue. Successful exploitation results in arbitrary command execution as the root user. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/46792 - https://vulncheck.com/advisories/5vtechnologies-blue-angel-command-injection
CVE ID: CVE-2025-34034 State: PUBLISHED Published: 2025-06-24T00:59:58.229Z Last Updated: 2025-11-20T21:19:42.408Z Vendors: 5VTechnologies Products: Blue Angel Software Suite Problem Types: CWE-798 Description: A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrative access to the device’s web interface. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC. Additional Analyst Notes: - CISA ADP Vulnr
ation evidence was observed by the Shadowserver Foundation on 2025-01-26 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/46792 - https://vulncheck.com/advisories/5vtechnologies-blue-angel-hardcoded-credentials
CVE ID: CVE-2025-34035 State: PUBLISHED Published: 2025-06-24T01:00:23.862Z Last Updated: 2025-11-20T21:15:28.292Z Vendors: EnGenius Products: EnShare IoT Gigabit Cloud Service Problem Types: CWE-78 Description: An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected commands are executed with root privileges, leading to full system compromise. Exploitation evidence was observed by the Shadowserver Foundation on 2024-12-05 UTC. Additional Analyst Notes: - CIS
se. Exploitation evidence was observed by the Shadowserver Foundation on 2024-12-05 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5413.php - https://www.exploit-db.com/exploits/42114 - https://packetstormsecurity.com/files/142792 - https://cxsecurity.com/issue/WLB-2017060050 - https://vulncheck.com/advisories/engenius-enshare-iot-gigabit-cloud-service
CVE ID: CVE-2025-34036 State: PUBLISHED Published: 2025-06-24T01:00:52.579Z Last Updated: 2025-11-20T21:14:28.026Z Vendors: Shenzhen TVT Products: CCTV-DVR Problem Types: CWE-78 Description: An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When the server processes a request to /language/[lang]/index.html, it uses the [lang] input unsafely in a tar extraction command without proper escaping. This allows an unauthenticated remote attacker to inject shell c
ly in a tar extraction command without proper escaping. This allows an unauthenticated remote attacker to inject shell commands and achieve arbitrary command execution as root. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20160322204109/http://www.kerneronsec.com/2016/02/remote-code-execution-in-cctv-dvrs-of.html - https://www.exploit-db.com/exploits/39596 - https://vulncheck.com/advisories/shenzhen-tvt-cctv-dvr-command-injection
CVE ID: CVE-2025-34037 State: PUBLISHED Published: 2025-06-24T01:03:27.693Z Last Updated: 2025-11-22T01:31:26.488Z Vendors: Linksys Products: E4200, E3200, E3000, E2500 v1/v2, E2100L v1, E2000, E1550, E1500 v1, E1200 v1, E1000 v1, E900 v1 Problem Types: CWE-78 Description: An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability is exploited in the wild by the "TheMoon" worm to deploy a MIPS ELF p
ckers to inject shell commands. This vulnerability is exploited in the wild by the "TheMoon" worm to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. This vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://isc.sans.edu/diary/17633 - https://www.exploit-db.com/exploits/31683 - https://vulncheck.com/advisories/linksys-routers-command-injection