CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-03-06
D-Link Wireless Routers soap.cgi Remote OS Command Injection Vulnerability (CVE-2018-6530) Analysis and Mitigation Guide
[Affected Scope] D-Link router models DIR-880L (v1.08B04 and prior), DIR-868L (v1.12b04 and prior), DIR-865L (v1.08.B01 and prior), and DIR-860L (v1.10b04 and prior)
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the target router by manipulating specific parameters in SOAP API requests, leading to complete device compromise
[Mitigation] Apply the latest official firmware patches provided by the vendor, disable remote WAN management interfaces, or replace end-of-life devices