CVE-2013-7471

A Command Injection vulnerability exists in the soap.cgi?service=WANIPConn1 URL on several D-Link devices, including DIR-845 (before v1.02b03), DIR-600 (before v2.17b01), DIR-645 (before v1.04b11), DIR-300 (rev. B), and DIR-865 . The root cause is the improper filtering of shell metacharacters wi...