EUVD-2020-2674

Malware in sbrugna...

The vulnerability of the system_time.cgi component of D-Link DIR-825 and TRENDnet TEW-632BRP router microprograms allows a hacker to execute arbitrary commands.

The vulnerability of the systemtime.cgi component in D-Link DIR-825 and TRENDnet TEW-632BRP routers exists due to the failure to address the need to neutralize specific elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Command injection

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a systemtime.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected...

CVE-2020-10216

The CVE-2020-10216 entry documents a command-injection vulnerability affecting D-Link DIR-825 Rev.B 2.10 and TRENDnet TEW-632BRP 1.010B32. A remote attacker can exploit the vulnerability by sending a crafted date parameter in a system_time.cgi POST request to execute arbitrary commands. Impact is...

CVE-2020-10216: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a systemtime.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected...