EUVD-2020-2674

Malware in sbrugna...

Command injection

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a systemtime.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected...

CVE-2020-10216

The CVE-2020-10216 entry documents a command-injection vulnerability affecting D-Link DIR-825 Rev.B 2.10 and TRENDnet TEW-632BRP 1.010B32. A remote attacker can exploit the vulnerability by sending a crafted date parameter in a system_time.cgi POST request to execute arbitrary commands. Impact is...