Skip to content
OpenAdvisories

Product · D-Link

DWR-M921

11 known vulnerabilities.

6 results · Clear filters · Feed

  • Medium 6.6

    D-Link DWR-M921 formWsc os command injection

    A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targetAPSsid leads to os command injection. The attack is possible to be carried out remotely. The exploi…

  • Medium 6.6

    D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection

    A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can…

  • Medium 6.6

    D-Link DWR-M921 formDiskPartition system command injection

    A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument devicename results in command injection. Remote exploitation of the attack is pos…

  • Medium 6.3

    D-Link DWR-M921 formLtefotaUpgradeFibocom command injection

    A vulnerability has been found in D-Link DWR-M921 1.1.50. This impacts an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url leads to command injection. It is possible to launch the attack remotely. The …

  • Medium 6.3

    D-Link DWR-M921 formLtefotaUpgradeQuectel sub_419920 command injection

    A flaw has been found in D-Link DWR-M921 1.1.50. This affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url causes command injection. It is possible to initiate the attack remotely. The explo…

  • Medium 6.3

    D-Link DWR-M920/DWR-M921/DIR-822K/DIR-825M formDebugDiagnosticRun system command injection

    A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to command injection. Remote exploita…