The vulnerability of the sub_4250E0() function (/boafrm/formSmsManage) in D-Link DWR-M961 router software allows a hacker to execute arbitrary commands.

The vulnerability of the sub4250E0 function /boafrm/formSmsManage of the D-Link DWR-M961 router’s microprogramming software is related to the failure to take measures to neutralize special elements during the processing of the actionvalue parameter. Exploiting this vulnerability allows a remote...