Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2019-20215

🗓️ 29 Jan 2020 02:23:26Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 173 Views🌐 WEB

D-Link DIR-859 devices permit remote command execution due to improper handling of HTTP_ST.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today		D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi Exploit
10 Feb 202000:00
–zdt
Gitee		Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform
8 Dec 202020:38
–gitee
BDU FSTEC		The vulnerability of the HTTP_ST component in the D-Link DIR-859 router’s microprogramming system arises from the failure to take measures to neutralize specific elements used in the operating system commands. This vulnerability allows a perpetrator to execute arbitrary commands.
20 Mar 202000:00
–bdu_fstec
Circl		CVE-2019-20215
29 May 201815:50
–circl
CNVD		D-Link DIR-859 ssdpcgi() M-SEARCH arbitrary command execution vulnerability (CNVD-2020-13689)
4 Feb 202000:00
–cnvd
Check Point Advisories		D-Link DIR-859 Remote Code Execution (CVE-2019-20215)
21 May 202000:00
–checkpoint_advisories
Cvelist		CVE-2019-20215
29 Jan 202002:23
–cvelist
Tenable Nessus		DLink DIR-859 1.05 & 1.06B01 Multiple Vulnerabilities (RCE)
22 Dec 202300:00
–nessus
Exploit DB		D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit)
10 Feb 202000:00
–exploitdb
Metasploit		D-Link Devices Unauthenticated Remote Command Execution in ssdpcgi
28 Jan 202019:15
–metasploit
Rows per page
NVD
Node
dlinkdir-859_firmwareMatch1.05
OR
dlinkdir-859_firmwareMatch1.06b01beta01
AND
dlinkdir-859Match-
ParameterPositionPathDescriptionCWE
STheader/htdocs/cgibin/ssdpcgiD-Link UPnP SSDP M-SEARCH ST header command injection leading to remote code execution.CWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 02:30Current
9.7High risk
Vulners AI Score9.7
CVSS 3.19.8
CVSS 210
EPSS0.75105
CWE-78
cve-2019-20215 d-link dir-859 remote attack os command execution improper handling http_st
173