CVE-2019-20216

🗓️ 29 Jan 2020 02:28:32Reported by mitreType

cve🔗 web.nvd.nist.gov👁 105 Views🌐 WEB

D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi()

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the REMOTE_PORT component of the D-Link DIR-859 router’s microprogramming system exists due to the failure to take measures to neutralize specific elements used in the operating system commands. This vulnerability allows a hacker to execute arbitrary commands.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SERVER_ID component in D-Link DIR-859 router microprogramming software exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This vulnerability allows a hacker to execute arbitrary commands.	20 Mar 202000:00	–	bdu_fstec
CNVD	D-Link DIR-859 ssdpcgi() M-SEARCH arbitrary command execution vulnerability (CNVD-2020-13686)	4 Feb 202000:00	–	cnvd
Cvelist	CVE-2019-20216	29 Jan 202002:28	–	cvelist
Tenable Nessus	DLink DIR-859 1.05 & 1.06B01 Multiple Vulnerabilities (RCE)	22 Dec 202300:00	–	nessus
EUVD	EUVD-2019-10770	7 Oct 202500:30	–	euvd
EUVD	EUVD-2019-10771	7 Oct 202500:30	–	euvd
NVD	CVE-2019-20216	29 Jan 202003:15	–	nvd
OpenVAS	D-Link DIR-859 < 1.07b03_beta Multiple Vulnerabilities (SAP10146, SAP10147)	16 May 202500:00	–	openvas
OSV	CVE-2019-20216	29 Jan 202003:15	–	osv

NVD

Node

dlink dir-859_firmwareMatch1.05

dlink dir-859_firmwareMatch1.06b01beta01

AND

dlink dir-859Match-

Source	Link
supportannouncement	www.supportannouncement.us.dlink.com/announcement/publication.aspx
medium	www.medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae
medium	www.medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35

Parameter	Position	Path	Description	CWE
urn:	header	/htdocs/cgibin/ssdpcgi	Remote OS command execution via M-SEARCH on SSDP CGI endpoint by manipulating urn: to exploit unchecked REMOTE_PORT; input parsed with strstr allows concatenation of arbitrary shell commands.	CWE-78
ST	header	/htdocs/cgibin/ssdpcgi	Remote OS command execution via M-SEARCH on SSDP CGI endpoint by manipulating urn: to exploit unchecked REMOTE_PORT; input parsed with strstr allows concatenation of arbitrary shell commands.	CWE-78

17 Jun 2026 02:30Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

CVSS 210

EPSS0.03673

CWE-78