Описание
D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter.
Ссылки
- Third Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:dlink:dir-655_firmware:3.02b05:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-655:-:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.08433
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-78
Связанные уязвимости
github
около 4 лет назад
D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter.
EPSS
Процентиль: 94%
0.08433
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-78