CVE-2019-20501

Published: 2020-03-05T15:15Z

Last Modified: 2024-11-21T04:38Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt