qmiweb Command Execution

The vulnerability of the qmiweb component in the microprogramming software of the D-Link DWR-932B router lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by adding the character “’”...