PT-2015-3344
CVE-2016-10182
·
تاريخ النشر
2015-12-04
·
تاريخ التحديث
2021-04-23
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
D-Link DWR-932B router (affected versions not specified)
Description
The issue is related to the qmiweb component of the D-Link DWR-932B router's firmware, which lacks input data sanitization measures. This allows a remote attacker to inject commands by adding a ` character, potentially enabling the execution of arbitrary commands.
Recommendations
For the D-Link DWR-932B router, consider disabling the qmiweb component until a patch is available to prevent command injection attacks.
Restrict access to the qmiweb interface to minimize the risk of exploitation.
Avoid using the ` character in input fields for the qmiweb component until the issue is resolved.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾