Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xvjj-gv4g-2h8h

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 750m11ac wireless router via the HTTP request parameter in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function.

An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 750m11ac wireless router via the HTTP request parameter in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function.

EPSS

Процентиль: 95%
0.21234
Средний

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 9.8
nvd
около 4 лет назад

An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell metacharacters.

EPSS

Процентиль: 95%
0.21234
Средний

Дефекты

CWE-77