Command injection

2023-09-1422:15:00

PRIOn knowledge base

www.prio-n.com

d-link dir-859

command injection

lxmldbc_system

vulnerability

0.001 Low

EPSS

Percentile

32.1%

JSON

D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbc_system function at /htdocs/cgibin.

CPENameOperatorVersion
dir-859_a1_firmwareeq1.05
dir-859_a1_firmwareeq1.6 beta1

CPE	Name	Operator	Version
	dir-859_a1_firmware	eq	1.05
	dir-859_a1_firmware	eq	1.6 beta1

References

www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-859

github.com/mmmmmx1/dlink/blob/main/dir-859/readme.md

www.dlink.com/en/security-bulletin/

0.001 Low

EPSS

Percentile

32.1%

JSON

Related for PRION:CVE-2023-39638