CVE-2019-17621—D-Link DIR-859 Router Command Execution Vulnerability

漏洞名称

D-Link DIR-859 Router Command Execution Vulnerability

描述

D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

其他说明

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147
• https://nvd.nist.gov/vuln/detail/CVE-2019-17621

相关 CWE

• CWE-78