VULNERABILITY INTELLIGENCE
CVE-2011-2716
CVSS score6.8 MEDIUM
EPSS probability1.80%
CISA KEVNot currently listed
Published2012-07-03
Last modified2026-06-16
CVSS vectorAV:A/AC:H/Au:N/C:C/I:C/A:C
Description
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
Weakness classification
- CWE-20: Improper Input Validation