setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter.
References
Link | Resource |
---|---|
https://www.exploit-db.com/exploits/39437 | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2020-03-08 18:15
Updated : 2021-04-23 07:38
NVD link : CVE-2016-11021
Mitre link : CVE-2016-11021
JSON object : View
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Products Affected
dlink
- dcs-930l
- dcs-930l_firmware