An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the Gateway key.
CPE | Name | Operator | Version |
---|---|---|---|
dir-818lw_firmware | eq | 2.5.0-b3 | |
dir-818lw_firmware | eq | 2.6b1 beta |