Skip to content
OpenAdvisories
Unscored CVE-2018-10967 EUVD-2018-3018GHSA-3w98-hgq4-9vr4

On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands tha…

Published May 18, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that can be executed on the device with higher privileges, aka remote code execution.

References