CVE-2018-10967

2018-05-1814:00:00

mitre

www.cve.org

9.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

JSON

On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that can be executed on the device with higher privileges, aka remote code execution.

References

fortiguard.com/zeroday/FG-VD-18-060