CVE-2020-25367

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login...

D-Link DIR-823G Command Injection (CVE-2020-25367; CVE-2020-25368)

A command injection vulnerability exists in D-Link DIR-823G devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-25367

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login...

CVE-2020-25367

CVE-2020-25367: A command-injection in the HNAP1 protocol of D-Link DIR-823G (firmware V1.0.2B05) allows an attacker with network access to log in and execute arbitrary commands via shell metacharacters in the Captcha field. The vulnerability affects the device’s login flow and can impact confide...