PRODUCT PROFILE

dwr-116_firmware

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危CVE-2018-108232018/10/17

D-Link Routers - Remote Command Injection

D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 device may allow an authenticated attacker to execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for full control over the device internals.

dwr-116_firmwarePoC 已收录

CVSS8.8EPSS 93.7%

高危CVE-2018-108222018/10/17

D-Link Routers - Local File Inclusion

D-Link routers DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02,DWR-512 through 2.02,DWR-712 through 2.02,DWR-912 through 2.02, DWR-921 through 2.02, DWR-111 through 1.01, and probably others with the same type of firmware allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request to the web interface.

dwr-116_firmwarePoC 已收录

CVSS7.5EPSS 86.2%