CVE-2018-10967

Name of the Vulnerable Software and Affected Versions D-Link DIR-550A versions through v2.10KR D-Link DIR-604M versions through v2.10KR

Description The issue allows a malicious user to forge an HTTP request and inject operating system commands that can be executed on the device with higher privileges, resulting in remote code execution. This is due to the lack of measures to neutralize special elements used in the operating system command.

Recommendations For D-Link DIR-550A versions through v2.10KR, update to a version later than v2.10KR to resolve the issue. For D-Link DIR-604M versions through v2.10KR, update to a version later than v2.10KR to resolve the issue. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.