CVE-2018-17064

The CVE-2018-17064 entry concerns D-Link DIR-816 A2 (firmware 1.10 B05). The /goform/sylogapply handler builds a command string using the syslogIp HTTP parameter after /goform/clearlog, enabling potential command injection. Root cause: lack of input neutralization in command construction. Impact:...