Description
A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | D-Link DWL-2600AP with firmware v4.2.0.17 | DWL-2600AP with firmware version v.4.2.0.17 | — |
Advisories 1
- WID-SEC-2023-0043 D-LINK Access Point (AP): Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jan 9, 2023