CVE-2020-10216

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-825_firmware:2.10:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-825:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:trendnet:tew-632brp_firmware:1.010b32:*:*:*:*:*:*:*
cpe:2.3:h:trendnet:tew-632brp:-:*:*:*:*:*:*:*

Information

Published : 2020-03-06 17:15

Updated : 2020-03-09 10:39


NVD link : CVE-2020-10216

Mitre link : CVE-2020-10216


JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa

Products Affected

trendnet

  • tew-632brp
  • tew-632brp_firmware

dlink

  • dir-825
  • dir-825_firmware