CVE-2021-39509

The advisory concerns CVE-2021-39509 affecting D-Link DIR-816 (DIR-816A2_FWv1.10CNB05_R1B011D88210). The HTTP parameter in /goform/form2userconfig.cgi is used to construct a username string for the delete-user function, enabling command injection via shell metacharacters. Affected component: the ...

D-Link DIR-816 A2 安全漏洞

The D-Link DIR-816 A2 is a wireless router from Taiwan, China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816A2, which stems from an issue discovered via the HTTP request parameter in the handler function of the goform form2userconfig.cgi route, where a username string can...