Lucene search
+L

7 matches found

NVD
NVD
•added 2025/11/06 8:15 p.m.•28 views

CVE-2022-50596

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

9.8CVSS0.04012EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/06 7:58 p.m.•53 views

CVE-2022-50596

CVE-2022-50596 affects D-Link DIR-1260 router firmware up to v1.20B05. The vulnerability is a pre-auth, command-injection flaw in the web management interface, exploitable via SetDest/Dest/Target arguments to the GetDeviceSettings form. Impact is unauthenticated command execution with root privil...

9.8CVSS8.8AI score0.04012EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•24 views

D-Link DIR-1260 security vulnerabilities

D-Link DIR-1260 is a wireless router from China AUO D-Link. A security vulnerability exists in D-Link DIR-1260 v1.20B05 and earlier versions, which originates from a command injection in the SetDest/Dest/Target parameter in the web management interface, which could lead to an unauthenticated...

9.8CVSS8.6AI score0.04012EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•8 views

CVE-2022-50596: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

9.8CVSS8.9AI score0.04012EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•26 views

PT-2025-45371

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

9.3CVSS8.9AI score0.04012EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•10 views

CVE-2023-44415: Improper Neutralization of Special Elements used in an OS Command

D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to exploit this vulnerability. The specif...

8CVSS7.5AI score0.01226EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/10/04 12:00 a.m.•8 views

PT-2023-5897

Name of the Vulnerable Software and Affected Versions D-Link DIR-1260 and DIR-2150 routers affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations. The flaw exists within the CLI service, which listens on TCP por...

8CVSS6.3AI score0.01226EPSS
SaveExploits0References7
Rows per page
Query Builder