CVE-2019-13481

2019-07-1019:53:29

mitre

www.cve.org

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

JSON

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MTU field to SetWanSettings.

References

www.securityfocus.com/bid/109131

github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-3.pdf