Vulnerability in N/a
CVE-2019-20501
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or fi…
EPSS: 0.905 (99.8th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
References
- supportannouncement.us.dlink.com/announcement/publication.aspx (x_refsource_MISC)
- www.exploit-db.com/exploits/46841 (x_refsource_MISC)