Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authenticatio…

Published 17 y ago 2009-08-14 · modified 4 mo ago 2026-06-16 · JSON

CVSS

6.8

v2.0 · NVD

CISA KEV

not known exploited

EPSS

1.3%

percentile 71%

Public exploits

Exploit-DB

Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the ping_ip parameter; (2) change the administrative credentials via the http_username and http_passwd parameters; (3) enable remote administration via the remote_management parameter; or (4) configure port forwarding via certain from, to, ip, and pro parameters. NOTE: This issue reportedly exists because of a "weak ... anti-CSRF fix" implemented in 24 sp2.

Exploit prediction (EPSS)

1.31% probability of exploitation in the next 30 days, higher than 71% of all scored CVEs.

Exploits and detections

EDB-9209 DD-WRT HTTPd Daemon/Service - Remote Command Execution · remote · 2009-07-20
EDB-7389 DD-WRT v24-sp1 - Cross-Site Reference Forgery · remote · 2008-12-08

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	6.8	`AV:N/AC:M/Au:N/C:P/I:P/A:P`

Classification

Weakness

CWE-352 Cross-Site Request Forgery

References

exploit-db.com /exploits/9209 · exploit, x_refsource_EXPLOIT-DB, x_transferred
securityfocus.com /archive/1/499119 · mailing-list, x_refsource_BUGTRAQ, x_transferred
dd-wrt.com /phpBB2/viewtopic.php?t=55173 · x_refsource_MISC, x_transferred
securityfocus.com /archive/1/499135 · mailing-list, x_refsource_BUGTRAQ, x_transferred
securityfocus.com /archive/1/499024 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

CVE List: CVE-2008-6975
NVD: CVE-2008-6975

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.