CVE-2017-14135

PoC —

CVSS 3.0

9.8 critical

EPSS

22%p97

Published

Sep 4, 2017 (Sep 4, 2017)

Modified

Jun 17, 2026

Description

enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.

Vendors: dreambox
Products: opendreambox
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (21.8%)

In the news0 stories

No ingested article mentions this CVE yet.