RCE in Dlink Dsr-1000
CVE-2013-5946
The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmw…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.065 (92.9th percentile) — read the EPSS interpretation.
Affected products
- Dlink Dsr-1000
- Dlink Dsr-1000_firmware — versions 1.01b50, 1.02b11, 1.02b25
- Dlink Dsr-1000n
- Dlink Dsr-1000n_firmware — versions 1.01b50, 1.02b11, 1.02b25
- Dlink Dsr-150
- Dlink Dsr-150_firmware — versions 1.05b29, 1.05b35, 1.05b46
- Dlink Dsr-150n
- Dlink Dsr-150n_firmware
- Dlink Dsr-250
- Dlink Dsr-250_firmware — versions 1.01b46, 1.01b56, 1.05b20
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)