CVE-2019-8315

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

PT-2019-1619

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue allows a remote attacker to execute arbitrary code and gain a root shell through a Command Injection vulnerability. This occurs when the twsystem function is called with untrusted input from...