CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-03-05
D-Link DWL-2600AP Wireless AP OS Command Injection Vulnerability Analysis and Mitigation Guide (CVE-2019-20500)
[Affected Scope] D-Link DWL-2600AP hardware Rev A, firmware version 4.2.0.15 and prior
[Impact] Authenticated attackers can execute arbitrary OS commands with root privileges via the Save Configuration functionality, leading to complete device compromise
[Mitigation] Apply the official firmware patch from the vendor, restrict access to the web management interface, or replace end-of-life devices