CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-09-16
D-Link ShareCenter DNS-320 login_mgr.cgi Remote Command Injection (RCE) Vulnerability (CVE-2019-16057) Analysis and Mitigation Guide
[Affected Scope] D-Link ShareCenter DNS-320 NAS devices running firmware versions up to and including 2.05.B10
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests.
[Mitigation] Immediately restrict external internet access to the device and replace the legacy/EoL hardware with a supported model.