CRITICAL🇵🇱 Wersja polska

CVE-2021-44127

CVSS 9.8v3.1pub. 2022-03-27upd. 2024-11-21

In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Dlink Dap 1360

    HW
    Dlink
    wszystkie wersje

  • Dlink Dap 1360f1 Firmware

    OS
    Dlink
    ≤ 6.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-32140HIGH7.5ten sam produkt

D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vul...

CVE-2023-32139HIGH8.8ten sam produkt

D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability al...

CVE-2023-32138HIGH8.8ten sam produkt

D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability all...

CVE-2023-32136HIGH8.8ten sam produkt

D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnera...

CVE-2023-32141HIGH8.8ten sam produkt

D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This ...