The vulnerability of the set_sta_enrollee_pin.cgi component of D-Link’s router microprogramming systems, DIR-825 and TEW-632BRP, allows a hacker to execute arbitrary commands.

The vulnerability of the setstaenrolleepin.cgi component of D-Link’s router microprogramming systems, such as DIR-825 and TEW-632BRP, exists due to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor...