D-Link DIR-1260 Router Arbitrary Command Execution

The vulnerability in the web interface of the D-Link DIR-1260 router operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the SetDest/Dest/Target parameter. Exploiting this vulnerability allows a remote...

CVE-2022-50596

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

CVE-2022-50596

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

CVE-2022-50596 D-Link DIR-1260 <= v1.20B05 GetDeviceSettings Unauthenticated Command Injection

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

CVE-2022-50596

CVE-2022-50596 affects D-Link DIR-1260 router firmware up to v1.20B05. The vulnerability is a pre-auth, command-injection flaw in the web management interface, exploitable via SetDest/Dest/Target arguments to the GetDeviceSettings form. Impact is unauthenticated command execution with root privil...

CVE-2022-50596: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

PT-2025-45371

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

D-Link DIR-1260 security vulnerabilities

D-Link DIR-1260 is a wireless router from China AUO D-Link. A security vulnerability exists in D-Link DIR-1260 v1.20B05 and earlier versions, which originates from a command injection in the SetDest/Dest/Target parameter in the web management interface, which could lead to an unauthenticated...

CVE-2023-44415

D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to exploit this vulnerability. The specif...

CVE-2023-44415: Improper Neutralization of Special Elements used in an OS Command

D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to exploit this vulnerability. The specif...

D-Link CLI Code Execution

The vulnerability of the CLI microprogramming software-based D-Link DIR-2150 and DIR-1260 routers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-5897

Name of the Vulnerable Software and Affected Versions D-Link DIR-1260 and DIR-2150 routers affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations. The flaw exists within the CLI service, which listens on TCP por...