Lucene search

K
cve[email protected]CVE-2015-2049
HistoryFeb 23, 2015 - 5:59 p.m.

CVE-2015-2049

2015-02-2317:59:06
web.nvd.nist.gov
23
cve-2015-2049
unrestricted file upload
d-link dcs-931l
remote code execution
security vulnerability

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.567 Medium

EPSS

Percentile

97.7%

Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.

Affected configurations

NVD
Node
dlinkdcs-931l_firmwareRange1.04
AND
dlinkdcs-931lMatch-

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.567 Medium

EPSS

Percentile

97.7%