Lucene search
PRIOn knowledge basePRION:CVE-2018-5371HistoryJan 12, 2018 - 9:29 a.m.
Server side request forgery (ssrf)
2018-01-1209:29:00
PRIOn knowledge base
www.prio-n.com
6
diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dsl-2540u_firmware | eq | me-1.0 | |
| dsl-2640u_firmware | eq | im-1.0 | |
| dsl-2640u_firmware | eq | me-1.0 |
References
Related
cvelist
cvelist
CVE-2018-5371
2018-01-12 09:00:00
cve
cve
CVE-2018-5371
2018-01-12 09:29:01
nvd
nvd
CVE-2018-5371
2018-01-12 09:29:01