Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2)…

1. 2015-06-28 First public exploit (Metasploit exploit/linux/http/efw_chpasswd_exec)
2. 2015-09-28 Published

69.91% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/linux/http/efw_chpasswd_exec Endian Firewall Proxy Password Change Command Injection metasploit exploit, excellent rank, 2015-06-28
• EDB-38096 Endian Firewall - Password Change Command Injection (Metasploit) remote, 2015-09-07
• EDB-37428 Endian Firewall < 3.0.0 - OS Command Injection (Metasploit) remote, 2015-06-29
• EDB-37426 Endian Firewall < 3.0.0 - OS Command Injection remote, 2015-06-29
• packetstormsecurity.com http://packetstormsecurity.com/files/133469/Endian-Firewall-Proxy-Password-Change-Command-Injection.html referenced PoC, tagged "exploit" by a source, unverified

Weakness

• CWE-77 Improper Neutralization of Special Elements used in a Command

• exploit-db.com /exploits/37428/

  exploit

• exploit-db.com /exploits/38096/

  exploit

• exploit-db.com /exploits/37426/

  exploit

• packetstormsecurity.com /files/133469/Endian-Firewall-Proxy-Password-Change-Command-Injection.html

  exploit

• rapid7.com /db/modules/exploit/linux/http/efw_chpasswd_exec

• CVE List CVE-2015-5082
• NVD CVE-2015-5082

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.