CVE-2021-46442

Summary of CVE-2021-46442 : Affected product is the D-Link DIR-825 G1 router, specifically the webupg binary. The vulnerability allows an attacker to bypass authentication via the parameter involved in the autoupgrade.asp flow, enabling unauthorized actions such as downloading configuration files...

D-Link DIR-825 G1 操作系统命令注入漏洞

The DIR-825 G1 is a router from D-Link in Taiwan, China. A command injection vulnerability exists in the D-Link DIR-825 G1 firmware version, which stems from a lack of parameter validation in the "webupg" binary file. The vulnerability can be exploited to execute arbitrary system commands with th...

CVE-2021-44127

In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...

CVE-2021-44127

In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...

Design/Logic Flaw

In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...

CVE-2021-44127

In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...

CVE-2021-44127

CVE-2021-44127 affects D-Link DAP-1360 F1 firmware versions <= v6.10. In the webupg binary, the attacker can use the file parameter with name=deleteFile after authorization to execute arbitrary system commands. This is documented across multiple sources (NVD entry and CNVD/CVE mirrors). The ex...