Leka Vecher

**Name of the Vulnerable Software and Affected Versions** DD-WRT versions prior to build 12533 **Description** The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a request to a "cgi-bin/" URI. This is due to a problem in the httpd.c in httpd in the management GUI. **Recommendations** For DD-WRT versions prior to build 12533, update to a version after build 12533 to resolve the issue. As a temporary workaround, consider restricting access to the cgi-bin directory to minimize the risk of exploitation.