CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
D-Link DWL-2600AP Wireless AP OS Command Injection Vulnerability Analysis and Mitigation Guide (CVE-2019-20500)
[Affected Scope] D-Link DWL-2600AP hardware Rev A, firmware version 4.2.0.15 and prior
[Impact] Authenticated attackers can execute arbitrary OS commands with root privileges via the Save Configuration functionality, leading to complete device compromise
[Mitigation] Apply the official firmware patch from the vendor, restrict access to the web management interface, or replace end-of-life devices
Ubiquiti AirOS stainfo.cgi Remote Command Injection Vulnerability (CVE-2010-5330) Analysis & Mitigation Guide
[Affected Scope] Ubiquiti AirOS prior to v4.0.1 (802.11 ISP), v5.3.5 (AirMax), v5.4.5 (AirSync), and Nanostation5 devices
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a specially crafted HTTP GET request
[Mitigation] Immediately upgrade to the patched firmware versions and restrict external access to the web management interface