D-Link: >> Dsl-2640u Firmware Security Vulnerabilities
diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request.
CVSS Score
8.8
EPSS Score
0.011
Published
2018-01-12