CVE-2018-19987

D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B0101i3seBETA, and DIR-890L Rev.A 1.21B02BETA devices mishandle IsAccessPoint in /HNAP1/SetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint...

CVE-2018-19987

CVE-2018-19987 affects multiple D-Link devices (DIR-822 Rev.B/Rev.C, DIR-860L Rev.B, DIR-868L Rev.B, DIR-880L Rev.A, DIR-890L Rev.A). The vulnerability is in /HNAP1/SetAccessPointMode and is caused by how the IsAccessPoint parameter is handled in SetAccessPointMode.php: it is saved to the ShellPa...