D-Link DIR-823G Command Injection (CVE-2020-25367; CVE-2020-25368)

A command injection vulnerability exists in D-Link DIR-823G devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-25368

CVE-2020-25368 affects the D-Link DIR-823G router (firmware V1.0.2B05). The vulnerability is a command injection in the HNAP1 protocol , allowing an attacker to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field during Login. Affected component: HNAP1 processing on t...

CVE-2020-25368

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login...