Every CVESearch/Get API key

CVE-2014-9144

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary...

7.5 HighPublic exploit

CVE-2014-9144 is a high vulnerability (CVSS 7.5) in Technicolor Td5130 Router Firmware, published December 5, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.56%, the 95th percentile. No source names a fixed version.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
8.56%EPSS, 95th percentile
Exploitation
None known1 public exploit
Fixed in
No fix listedNo source names one

Description

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field (setobject_ip parameter).

Exploit likelihood

8.56%Up 7.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBTechnicolor DT5130 2.05.C29GV - Multiple Vulnerabilities2014-12-04

What each source reports

NVD Score used7.5

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field (setobject_ip parameter).

Record
CVE-2014-9144
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-77
Updated
2026-11-02
CVE ListNo score

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field (setobject_ip parameter).

Record
CVE-2014-9144
Updated
2026-11-02
EUVDEUVD-2014-8969No score

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field (setobject_ip parameter).

Record
EUVD-2014-8969
Updated
2026-11-03
GitHub AdvisoriesGHSA-wvc9-6xq9-f3hxNo score

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary...

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field (setobject_ip parameter).

Record
GHSA-wvc9-6xq9-f3hx
Weakness
CWE-77
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open