Cisco Linksys WMB54G TFTP Command Injection
Cisco Linksys WMB54G 1.x
System access from local network
A vulnerability in Cisco Linksys WMB54G was reported, which can be exploited by malicious people to compromise a vulnerable device. The vulnerability is caused due to missing input validation in the TFTP service when running the firmware update functionality and can be exploited to inject and execute arbitrary shell commands. Additionally, it may be possible to apply malicious firmware images uploaded via the TFTP service to the device.
The vulnerability is reported in version 1 running firmware version 2.18. Other versions may also be affected.
Successful exploit allows an attacker to execute arbitrary commands with user privileges in context of the affected application.
No official solution is currently available.