Command injection

An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP command...

PT-2019-13616

Name of the Vulnerable Software and Affected Versions D-Link 6600-AP version 4.2.0.14 D-Link DWL-3600AP version 4.2.0.14 D-Link DWL-8610AP Ax version 4.2.0.14 Description An issue was discovered that allows post-authenticated Certificate and RSA Private Key extraction through an insecure...

CVE-2019-14334: Improper Certificate Validation

An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP command...