CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
D-Link DIR-859 Wi-Fi Router UPnP gena.cgi Remote Command Execution (RCE) Vulnerability (CVE-2019-17621)
[Affected Scope] D-Link DIR-859 Wi-Fi router firmware versions 1.05 and 1.06B01 Beta01
[Impact] An unauthenticated remote attacker on the local network can execute arbitrary system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service
[Mitigation] Apply the official firmware security patches, disable the UPnP service, and restrict access to the router management interface
Realtek SDK Miniigd SOAP Service Remote Code Execution (RCE) Vulnerability (CVE-2014-8361) Analysis and Mitigation Guide
[Affected Scope] Routers and embedded devices utilizing the Realtek SDK with the miniigd UPnP SOAP service enabled
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted SOAP requests, leading to complete device compromise
[Mitigation] Disable the UPnP service, block external access to port 52869/TCP, and apply the latest firmware updates from the device vendor