CVE-2020-15893

D-Link DIR-816L devices running firmware version 2.x before 1.10b04Beta02 are vulnerable to OS command injection via the Universal Plug and Play (UPnP) component. The vulnerability exists because UPnP is enabled by default on port 1900 , allowing a remote attacker to inject arbitrary commands by ...

CVE-2020-15893

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/upnp/dlinkupnpmsearchexec.rb 2023-12-06 00:05:31+00:00| seen| https://t.me/arpsyndicate/1471 2025-02-06 03:13:44+00:00| seen|...