The vulnerabilities of the components ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi of the D-Link DIR-823G router’s microprogramming system allow a hacker to execute arbitrary code.

The vulnerability of the ExportSettings.sh, uploadsettings.cgi, GetDownLoadSyslog.sh, and uploadfirmware.cgi components of the D-Link DIR-823G router’s microprogramming system is related to the possibility of bypassing authentication. Exploiting this vulnerability allows a malicious actor to...

CVE-2020-35715

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote authenticated users to execute arbitrary commands via shell metacharacters in a filename to the uploadsettings.cgi page...

Code injection

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote authenticated users to execute arbitrary commands via shell metacharacters in a filename to the uploadsettings.cgi page...