D-Link DSL-GS225 J1 OS Command Injection Vulnerability

The D-Link DSL-GS225 J1 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-GS225 J1 AU1.0.4 version. The vulnerability can be exploited to execute operating system commands by placing shell metacharacters after supported CLI commands...

PT-2020-19218

Name of the Vulnerable Software and Affected Versions D-Link DSL-GS225 J1 AU version 1.0.4 Description The issue allows an admin to execute OS commands by placing shell metacharacters after a supported CLI command. This can be demonstrated by using the command ping -c1 127.0.0.1; cat /etc/passwd...

CVE-2020-6765: Improper Neutralization of Special Elements used in an OS Command

D-Link DSL-GS225 J1 AU1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET...