Unrated severityNVD Advisory· Published Sep 28, 2015· Updated Jun 17, 2026

CVE-2015-5082

Description

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Endian/Firewall2 versions
cpe:2.3:a:endian_firewall:endian_firewall:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:endian_firewall:endian_firewall:*:*:*:*:*:*:*:*range: <=2.5.1
- (no CPE)range: <3.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/133469/Endian-Firewall-Proxy-Password-Change-Command-Injection.htmlnvdExploit
www.exploit-db.com/exploits/37426/nvdExploit
www.exploit-db.com/exploits/37428/nvdExploit
www.exploit-db.com/exploits/38096/nvdExploit
www.rapid7.com/db/modules/exploit/linux/http/efw_chpasswd_execnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.056
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000