CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
D-Link DIR-859 Router hedwig.cgi Path Traversal and Remote Code Execution Vulnerability (CVE-2024-0769)
[Affected Scope] D-Link DIR-859 router firmware version 1.06B01 and prior.
[Impact] Unauthenticated remote attackers can exploit this vulnerability to read sensitive system configuration files and potentially gain full administrative control over the device.
[Mitigation] This product is End-of-Life (EOL) and will not receive official security patches; immediate retirement and replacement of the device is strongly recommended.
D-Link DIR-859 Wi-Fi Router UPnP gena.cgi Remote Command Execution (RCE) Vulnerability (CVE-2019-17621)
[Affected Scope] D-Link DIR-859 Wi-Fi router firmware versions 1.05 and 1.06B01 Beta01
[Impact] An unauthenticated remote attacker on the local network can execute arbitrary system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service
[Mitigation] Apply the official firmware security patches, disable the UPnP service, and restrict access to the router management interface