Description
On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system" library function.
Unscored
CVE-2018-17787
EUVD-2018-9533GHSA-jq8r-c5mq-7jcx
On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because th…
Published Oct 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre