CVE-2019-20216

🗓️ 29 Jan 2020 03:15:14Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 11 Views

D-Link DIR-859 allows remote OS command execution via ssdpcgi

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the REMOTE_PORT component of the D-Link DIR-859 router’s microprogramming system exists due to the failure to take measures to neutralize specific elements used in the operating system commands. This vulnerability allows a hacker to execute arbitrary commands.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SERVER_ID component in D-Link DIR-859 router microprogramming software exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This vulnerability allows a hacker to execute arbitrary commands.	20 Mar 202000:00	–	bdu_fstec
CNVD	D-Link DIR-859 ssdpcgi() M-SEARCH arbitrary command execution vulnerability (CNVD-2020-13686)	4 Feb 202000:00	–	cnvd
CVE	CVE-2019-20216	29 Jan 202002:28	–	cve
Cvelist	CVE-2019-20216	29 Jan 202002:28	–	cvelist
Tenable Nessus	DLink DIR-859 1.05 & 1.06B01 Multiple Vulnerabilities (RCE)	22 Dec 202300:00	–	nessus
EUVD	EUVD-2019-10770	7 Oct 202500:30	–	euvd
EUVD	EUVD-2019-10771	7 Oct 202500:30	–	euvd
OpenVAS	D-Link DIR-859 < 1.07b03_beta Multiple Vulnerabilities (SAP10146, SAP10147)	16 May 202500:00	–	openvas
OSV	CVE-2019-20216	29 Jan 202003:15	–	osv

NVD

Node

dlink dir-859_firmwareMatch1.05

OR

dlink dir-859_firmwareMatch1.06b01beta01

AND

dlink dir-859Match-

Source	Link
supportannouncement	www.supportannouncement.us.dlink.com/announcement/publication.aspx
medium	www.medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae
medium	www.medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35

21 Nov 2024 04:38Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

CVSS 210

EPSS0.05128

cve-2019-20216 remote attack arbitrary commands