CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-16920

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.943

EPSS Ranking 99.9%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

Proposed Action

Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.

Ransomware Campaign

Unknown

References

Products affected by CVE-2019-16920

Dlink » Dap-1533 » Version: N/A

cpe:2.3:h:dlink:dap-1533:-
Dlink » Dhp-1565 » Version: ax

cpe:2.3:h:dlink:dhp-1565:ax
Dlink » Dir-615 » Version: N/A

cpe:2.3:h:dlink:dir-615:-
Dlink » Dir-652 » Version: ax

cpe:2.3:h:dlink:dir-652:ax
Dlink » Dir-655 » Version: cx

cpe:2.3:h:dlink:dir-655:cx
Dlink » Dir-825 » Version: N/A

cpe:2.3:h:dlink:dir-825:-
Dlink » Dir-835 » Version: N/A

cpe:2.3:h:dlink:dir-835:-
Dlink » Dir-855l » Version: N/A

cpe:2.3:h:dlink:dir-855l:-
Dlink » Dir-862l » Version: N/A

cpe:2.3:h:dlink:dir-862l:-
Dlink » Dir-866l » Version: ax

cpe:2.3:h:dlink:dir-866l:ax
Dlink » Dap-1533 Firmware » Version: N/A

cpe:2.3:o:dlink:dap-1533_firmware:-
Dlink » Dhp-1565 Firmware » Version: N/A

cpe:2.3:o:dlink:dhp-1565_firmware:-
Dlink » Dhp-1565 Firmware » Version: 1.01

cpe:2.3:o:dlink:dhp-1565_firmware:1.01
Dlink » Dir-615 Firmware » Version: N/A

cpe:2.3:o:dlink:dir-615_firmware:-
Dlink » Dir-652 Firmware » Version: N/A

cpe:2.3:o:dlink:dir-652_firmware:-
Dlink » Dir-655 Firmware » Version: N/A

cpe:2.3:o:dlink:dir-655_firmware:-
Dlink » Dir-655 Firmware » Version: 3.02b05

cpe:2.3:o:dlink:dir-655_firmware:3.02b05
Dlink » Dir-825 Firmware » Version: N/A

cpe:2.3:o:dlink:dir-825_firmware:-
Dlink » Dir-835 Firmware » Version: N/A

cpe:2.3:o:dlink:dir-835_firmware:-
Dlink » Dir-855l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-855l_firmware:-
Dlink » Dir-862l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-862l_firmware:-
Dlink » Dir-866l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-866l_firmware:-
Dlink » Dir-866l Firmware » Version: 1.03b04

cpe:2.3:o:dlink:dir-866l_firmware:1.03b04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-16920

Products

Pricing

Contact Us