CVE-2020-10215

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dnsqueryname parameter in a dnsquery.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected...

CVE-2020-10215

The CVE-2020-10215 entry affects D-Link DIR-825 Rev.B devices (2.10) and TRENDnet TEW-632BRP (1.010B32). Affected component: dns_query.cgi handling in the device web interface, where the dns_query_name parameter enables an arbitrary command execution via a remote HTTP POST request. Root cause: im...