CVE-2021-46228

Name of the Vulnerable Software and Affected Versions D-Link DI-7200G versions V2.E1

Description The issue is related to insufficient input validation in the httpd debug.asp file, specifically with the time parameter. This allows a remote attacker to execute arbitrary commands.

Recommendations For D-Link DI-7200G version V2.E1, as a temporary workaround, consider restricting access to the httpd debug.asp function until a patch is available. Avoid using the time parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.