CVE-2020-24581

creationtimestamp| type| source ---|---|--- 2020-12-22 22:53:21+00:00| seen| https://t.me/cibsecurity/21187 2021-02-04 17:32:29+00:00| published-proof-of-concept| https://t.me/reconshell/404 2021-02-05 19:52:01+00:00| published-proof-of-concept|...

CVE-2020-24581

CVE-2020-24581 affects D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The issue stems from an execute_cmd.cgi feature (not reachable via the web UI) that allows an authenticated user to execute Operating System commands, enabling potential arbitrary command execution on the ...