Vulnerability in N/a
CVE-2020-15893
An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target (ST) fi…
EPSS: 0.825 (99.3th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- supportannouncement.us.dlink.com/announcement/publication.aspx (x_refsource_MISC)
- research.loginsoft.com/bugs/multiple-vulnerabilities-discovered-in-the-d-link-f… (x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-15893?
- CVE-2020-15893 is a vulnerability in N/a. Published 2020-07-22.
- Is CVE-2020-15893 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.