CVE-2019-20217

D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi in /htdocs/cgibin, because SERVERID is mishandled. The value of the urn: service/device is checked with the strstr function, which allows an attack...

CVE-2019-20217

Affected product: D-Link DIR-859 router (firmware 1.05 and 1.06B01 Beta01). Vulnerabilities concern the ssdpcgi() M-SEARCH handling in /htdocs/cgibin, where the urn: service/device value is parsed with strstr, enabling an attacker to append shell metacharacters and execute arbitrary OS commands. ...