Lucene search

K
cvelistGovTech CSGCVELIST:CVE-2021-42784
HistoryNov 23, 2021 - 9:37 p.m.

CVE-2021-42784 OS Command Injection in debug_fcgi in D-Link DWR-932C E1 Firmware 1.0.0.4

2021-11-2321:37:35
CWE-78
GovTech CSG
www.cve.org
3
cve-2021-42784; command injection; d-link dwr-932c e1

AI Score

9.9

Confidence

High

EPSS

0.003

Percentile

72.0%

OS Command Injection vulnerability in debug_fcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request.

CNA Affected

[
  {
    "product": "DWR-932C E1",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThanOrEqual": "1.0.0.4",
        "status": "affected",
        "version": "1.0.0.4",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

9.9

Confidence

High

EPSS

0.003

Percentile

72.0%

Related for CVELIST:CVE-2021-42784