CVE-2021-46227

Affected product: D-Link DI-7200GV2.E1 (firmware v21.04.09E1). Vulnerability: Command injection in the function proxy_client.asp, exploitable via crafted values of proxy_srv, proxy_srvport, proxy_lanip, and proxy_lanport. Impact (as described): Attacker may execute arbitrary commands on the devic...