CVE-2019-13561

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the onlinefirmwarecheck.cgi checkfwurl parameter...

CVE-2019-13561

The CVE affects D-Link DIR-655 C devices prior to version 3.02B05 BETA03, where an attacker can remotely execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter. Affected component is the firmware check URL handling in DIR-655 C; root cause is u...

CVE-2019-13561: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the onlinefirmwarecheck.cgi checkfwurl parameter...