Code injection

2023-12-1922:15:00

PRIOn knowledge base

www.prio-n.com

code injection

d-link dir-850l

remote attacker

arbitrary code execution

crafted script

8.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.5%

An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter.

CPENameOperatorVersion
dir-850l_firmwareeq223wwb1-fw

CPE	Name	Operator	Version
	dir-850l_firmware	eq	223wwb1-fw

References

github.com/ef4tless/vuln/blob/master/iot/DIR-850L/bug1.md