D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen.
References
Link | Resource |
---|---|
https://github.com/imsebao/404team/blob/master/dlink/dlink_dir615_rce.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2018-04-26 10:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-10431
Mitre link : CVE-2018-10431
JSON object : View
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Products Affected
d-link
- dir-615
- dir-615_firmware