Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

PT-2019-4530 · D Link · D-Link Dir-895L/R +10

🗓️ 12 Dec 2019 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

D-Link DIR series vulnerable to root command execution via /gena.cgi SUBSCRIBE.

Related
Refs
ReporterTitlePublishedViews
Family
0day.today		D-Link DIR-859 Unauthenticated Remote Command Execution Exploit
23 Jan 202000:00
–zdt
Gitee		Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform
8 Dec 202020:38
–gitee
Gitee		Exploit for OS Command Injection in Dlink Dir-859_Firmware
14 Nov 202221:16
–gitee
Gitee		Exploit for OS Command Injection in Dlink Dir-859_Firmware
27 Sep 202114:59
–gitee
GithubExploit		Exploit for OS Command Injection in Dlink Dir-859_Firmware
20 Jul 202209:39
–githubexploit
ATTACKERKB		CVE-2019-17621
28 Mar 201900:00
–attackerkb
Circl		CVE-2019-17621
21 Jan 202013:41
–circl
CISA KEV Catalog		D-Link DIR-859 Router Command Execution Vulnerability
29 Jun 202300:00
–cisa_kev
CISA		 CISA Adds Eight Known Exploited Vulnerabilities to Catalog
29 Jun 202312:00
–cisa
CNVD		Command Execution Vulnerability in DLINKDIR-859 Series Routers
31 Dec 201900:00
–cnvd
Rows per page
SourceLink
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/upnp/dlink_dir859_subscribe_exec.rb
githubwww.github.com/Squirre17/CVE-2019-17621
mediumwww.medium.com/@s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9
mediumwww.medium.com/@s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104
packetstormsecuritywww.packetstormsecurity.com/files/156054/D-Link-DIR-859-Unauthenticated-Remote-Command-Execution.html
mediumwww.medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104
nvdwww.nvd.nist.gov/vuln/detail/CVE-2019-17621
supportannouncementwww.supportannouncement.us.dlink.com/announcement/publication.aspx
bduwww.bdu.fstec.ru/vul/2020-00558
supportannouncementwww.supportannouncement.us.dlink.com/announcement/publication.aspx
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Apr 2025 00:00Current
9.9High risk
Vulners AI Score9.9
CVSS 3.19.8
CVSS 210
EPSS0.93009
D LinkDIR seriesroot commandgenasubscribe endpointDIR 859input handling
2