Description (CNA)
A vulnerability was detected in D-Link DI-7100G C1 24.04.18D1. Affected by this issue is the function set_jhttpd_info. Performing a manipulation of the argument usb_username results in command injection. Remote exploitation of the attack is possible.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| D-Link / DI-7100G C1 | affected 24.04.18D1 |
CWE
CWE-77, CWE-74
References
- https://vuldb.com/?id.344896
- https://vuldb.com/?ctiid.344896
- https://vuldb.com/?submit.749803
- https://github.com/glkfc/IoT-Vulnerability/blob/main/D-Link/Dlink_4.md
- https://www.dlink.com/
ADP enrichment
No English description supplied.
No references supplied.