CVE-2019-12787

An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the Gateway key...

CVE-2019-12787

CVE-2019-12787 affects the D-Link DIR-818LW firmware (versions 2.05.B03–2.06B01 BETA). The issue is a command injection in HNAP1 SetWanSettings caused by XML injection of the Gateway value, stemming from inadequate input filtering during command construction. The vulnerability has a high impact (...