CVE-2019-13481

Name of the Vulnerable Software and Affected Versions D-Link DIR-818LW version 2.06betab01

Description A command injection issue was discovered in the HNAP1 protocol, which is exploitable with authentication. This issue occurs via shell metacharacters in the MTU field when using the SetWanSettings function.

Recommendations For D-Link DIR-818LW version 2.06betab01, as a temporary workaround, consider restricting access to the HNAP1 protocol or disabling the SetWanSettings function until a patch is available. Avoid using shell metacharacters in the MTU field to minimize the risk of exploitation.