CVE-2019-17621

CVE-2019-17621 affects the D-Link DIR-859 router (firmware 1.05/1.06B01 Beta01). The issue is an unauthenticated remote command-execution vulnerability via the UPnP endpoint at /gena.cgi. An attacker on the local network can send a crafted HTTP SUBSCRIBE request to the UPnP service and execute sy...

CVE-2019-20213

D-Link DIR-859 routers are affected by CVE-2019-20213: unauthenticated information disclosure via the AUTHORIZED_GROUP=1%0a value demonstrated by vpnconfig.php on devices running versions prior to 1.07b03_beta. The vulnerability enables exposure of information over the network with no authenticat...

CVE-2022-46076

CVE-2022-46076 affects D-Link DIR-869 (DIR869Ax_FW102B15) with an Authentication Bypass via phpcgi. CVSSv3.1 base score 7.5 (HIGH). Root cause: authentication bypass in phpcgi interface. Exploitation status in connected data indicates a PoC exists; NVD entry does not confirm active exploits. Docu...