D-Link DAP-1860 Command Injection (CVE-2019-19597)

A command injection vulnerability exists in D-Link DAP-1860. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2019-19597

The D-Link DAP-1860 WiFi range extender is vulnerable to arbitrary remote code execution as root without authentication. The root cause is the improper handling of shell metacharacters within the HNAP_AUTH HTTP header . Affected devices are those running firmware versions before v1.04b03 Beta . S...