CVE-2021-42783

Missing Authentication for Critical Function vulnerability in debugpostset.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute administrative actions...

CVE-2021-42784

CVE-2021-42784 describes an OS command injection in the debug_fcgi component of the D-Link DWR-932C E1 firmware. A remote attacker could exploit a crafted HTTP request to execute commands on the device, with high impact across confidentiality, integrity, and availability per CVSS 3.1/3.0 scores i...