Description
In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized.
Unscored
CVE-2021-44127
EUVD-2021-30983GHSA-jcv4-m7f3-w7rm
In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system …
Published Mar 27, 2022 · Updated Aug 4, 2024 · Assigned by mitre