PT-2019-4007

CVE-2019-6014

Published

2019-10-04

Updated

2020-01-07

Description by

CVSS 3.1

8.8

High

MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DBA-1510P versions 1.70b009 and earlier

Description The issue is related to the lack of measures to neutralize special elements used in operating system commands, which can be exploited by a remote attacker to execute arbitrary commands via the Web User Interface.

Recommendations For D-Link DBA-1510P versions 1.70b009 and earlier, update the firmware to a version later than 1.70b009 to resolve the issue. As a temporary workaround, consider restricting access to the Web User Interface to minimize the risk of exploitation.

Exploitability

Fix

Impacts

Researchers

Goroh_Kun

Katsuhiko Sato

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Related identifiers

CVE-2019-6014