Unscored CVE-2020-10216 EUVD-2020-2674GHSA-pmcc-x97j-6q5m

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parame…

Published Mar 7, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.

References

https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf
https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability1.md