The vulnerability of the web_cert_download_handler() function in D-Link’s wireless access points, the DWL-6610AP, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the webcertdownloadhandler function in D-Link DWL-6610AP wireless access points relates to the lack of measures taken to neutralize special elements used in the operating system’s processing of the certDownload parameter. Exploiting this vulnerability can allow an attacker to...

PT-2023-5382 · D Link · D-Link Dwl-6610Ap

Name of the Vulnerable Software and Affected Versions: D-LINK DWL-6610AP version FW v 4.3.0.8B003C Description: A command injection issue was found in the pcap download handler function, allowing attackers to execute arbitrary commands via the update.device.packet-capture.tftp-file-name parameter...