Описание
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter.
Ссылки
- PatchVendor Advisory
- ExploitThird Party AdvisoryVDB Entry
- PatchVendor Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 4.2.0.15 (включая)
Одновременно
cpe:2.3:o:dlink:dwl-2600ap_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dwl-2600ap:-:*:*:*:*:*:*:*
EPSS
Процентиль: 100%
0.88846
Высокий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter.
EPSS
Процентиль: 100%
0.88846
Высокий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-78