Loading
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
Use CWE-20, T-Mobile vendor hub and Tm-Ac1900 product page to widen CVE-2011-2716 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2014-9583, CVE-2013-5948 and CVE-2013-1813 for nearby disclosures in the same product family.