prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely.
8.8CVSS
8.5AI Score
0.033EPSS
A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.
7.8CVSS
8AI Score
0.001EPSS
9.8CVSS
9.4AI Score
0.002EPSS