VULNERABILITY INTELLIGENCE
CVE-2009-2300
CVSS score10 HIGH
EPSS probability2.78%
CISA KEVNot currently listed
Published2009-07-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request.