CVE-2018-19300

🗓️ 11 Apr 2019 15:22:44Reported by mitreType

D-Link DAP-1530, DAP-1610, DWR-111, DWR-116, DWR-512, DWR-711, DWR-712, DWR-921 devices before specified firmware versions allow remote attackers to execute arbitrary commands

Reporter	Title	Published	Views	Family All 7
CNVD	Multiple D-Link Products Input Validation Error Vulnerability	15 Apr 201900:00	–	cnvd
Cvelist	CVE-2018-19300	11 Apr 201915:22	–	cvelist
NVD	CVE-2018-19300	11 Apr 201916:29	–	nvd
OpenVAS	D-Link DWR/DAP 'EXCU_SHELL' RCE Vulnerability - Active Check	8 Nov 201800:00	–	openvas
OSV	CVE-2018-19300	11 Apr 201916:29	–	osv
Prion	Design/Logic Flaw	11 Apr 201916:29	–	prion
Positive Technologies	PT-2019-2543 · D Link · Dap-1530 +7	11 Apr 201900:00	–	ptsecurity

NVD

Node

d-link dap-1530_firmwareRange≤1.05

AND

dlink dap-1530Match-

Node

d-link dap-1610_firmwareRange≤1.05

AND

dlink dap-1610Match-

Node

dlink dwr-111_firmwareRange≤1.01

AND

dlink dwr-111Match-

Node

d-link dwr-116_firmwareMatch1.06b1

d-link dwr-116_firmwareMatch1.06b2

dlink dwr-116_firmwareRange≤1.05

AND

dlink dwr-116Match-

Node

dlink dwr-512_firmwareRange≤2.02

AND

dlink dwr-512Match-

Node

d-link dwr-711_firmwareRange≤1.11

AND

dlink dwr-711Match-

Node

dlink dwr-712_firmwareRange≤2.02

AND

dlink dwr-712Match-

Node

dlink dwr-921_firmwareRange≤1.02

AND

dlink dwr-921Match-

Node

dlink dwr-921_firmwareRange≤2.02

AND

dlink dwr-921Match-

Source	Link
community	www.community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers/1772
greenbone	www.greenbone.net/en/serious-vulnerability-discovered-in-d-link-routers/
greenbone	www.greenbone.net/schwerwiegende-sicherheitsluecke-in-d-link-routern-entdeckt/
eu	www.eu.dlink.com/de/de/support/support-news/2019/march/19/remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers

21 Nov 2024 03:57Current

9.7High risk

Vulners AI Score9.7

CVSS 39.8

CVSS 210

EPSS0.23328

CWE-20