PT-2019-4007

CVE-2019-6014

Publicado

2019-10-04

Atualizado

2020-01-07

Descrição por

CVSS 3.1

8.8

Alta

MétricasAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DBA-1510P versions 1.70b009 and earlier

Description The issue is related to the lack of measures to neutralize special elements used in operating system commands, which can be exploited by a remote attacker to execute arbitrary commands via the Web User Interface.

Recommendations For D-Link DBA-1510P versions 1.70b009 and earlier, update the firmware to a version later than 1.70b009 to resolve the issue. As a temporary workaround, consider restricting access to the Web User Interface to minimize the risk of exploitation.

Explorabilidade

Correção

Impactos

Pesquisadores

Goroh_Kun

Katsuhiko Sato

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Identificadores relacionados

CVE-2019-6014