CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

EUVD-2025-210769

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26238: Improper Control of Generation of Code

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

PT-2026-80994

Name of the Vulnerable Software and Affected Versions D-Link DI-8100G version 17.12.20A1 Description An issue exists in the msp info endpoint where the flag parameter can be exploited to execute arbitrary code. Arbitrary code execution allows an attacker to run unauthorized commands on the system...

CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26238

D-Link DI-8100G running version 17.12.20A1 is vulnerable to an improper control of generation of code . An attacker can exploit the flag parameter within the msp_info endpoint to achieve arbitrary code execution , allowing for the execution of unauthorized commands on the system. As of the provid...

D-Link多款产品 操作系统命令注入漏洞

D-Link DI-8100 and others are products of China AUO D-Link.D-Link DI-8100 is a wireless broadband router designed for small and medium-sized network environments.D-Link DI-8100G is a Gigabit Internet Behavior Management certified router.D-Link DI-8200 is an enterprise-class router. An OS command...

CVE-2025-10441: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in D-Link DI-8100G, DI-8200G and DI-8003G 17.12.20A1/19.12.10A1. Affected by this issue is the function sub433F7C of the file versionupgrade.asp of the component jhttpd. The manipulation of the argument path results in os command injection. The attack may be launched...

CVE-2024-44401

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgradefilter.asp file...

D-Link DI-8100G Command Injection Vulnerability

D-Link DI-8100G is a broadband router designed for small and medium-sized network environments, supporting multi-line bandwidth overlay, PPPoE/WEB authentication billing, intelligent traffic control, Internet behavior management and other functions. The D-Link DI-8100G suffers from a command...

CVE-2024-44401

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgradefilter.asp file...

CVE-2024-44402

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via mspinfo.htm...

CVE-2024-44402

D-Link DI-8100G is affected (version 17.12.20A1) by a Command Injection vulnerability in the msp_info.htm page. The root cause, as described across sources, is insufficient input neutralization in msp_info.htm, allowing an attacker to submit a crafted request and execute arbitrary commands. This ...

D-Link DI-8100 安全漏洞

D-Link DI-8100G is a broadband router designed for small and medium-sized network environments, supporting multi-line bandwidth overlay, PPPoE/WEB authentication billing, intelligent traffic control, Internet behavior management and other functions. The D-Link DI-8100G suffers from a command...

CVE-2024-44402

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via mspinfo.htm...

CVE-2024-44402: Improper Neutralization of Special Elements used in a Command

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via mspinfo.htm...

CVE-2024-44401: Improper Neutralization of Special Elements used in a Command

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgradefilter.asp file...

PT-2024-6489 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100G version 17.12.20A1 Description: The issue is related to the msp info.htm file of the D-Link DI-8100G network device, which fails to neutralize special elements used in an operating system command. This can be exploited by a...