PT-2015-3362 · D Link · Dir-815

CVE-2014-8888

·

Publicado

2015-08-10

·

Atualizado

2023-04-26

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions D-Link DIR-815 versions prior to 2.03.B02
Description The issue is related to insufficient input validation in the remote administration interface, allowing remote attackers to execute arbitrary commands via specially crafted HTTP requests. This can be achieved through vectors related to an HTTP command injection issue.
Recommendations For versions prior to 2.03.B02, update the firmware to version 2.03.B02 or later to resolve the issue. As a temporary workaround, consider restricting access to the remote administration interface until the update is applied.

Correção

Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2018-00780
CVE-2014-8888

Produtos afetados

Dir-815