CVE-2017-14135: Dreambox Opendreambox

Critical severity, CVSS 9.8. EPSS: 21.8% chance of exploitation in the next 30 days.

enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.

Affected products

• Dreambox Opendreambox: version 2.0 only

Published 2017-09-04. Last modified 2026-06-17.