D-Link DIR-859 Unauthenticated Remote Command Execution
Posted by deepcore on January 23, 2020 – 2:08 am
D-Link DIR-859 Routers are vulnerable to OS command injection via the UPnP interface. The vulnerability exists in /gena.cgi (function genacgi_main() in /htdocs/cgibin), which is accessible without credentials.
Post a reply
You must be logged in to post a comment.