Command Injection Vulnerability in D-Link DIR-818LW Firmware 2.06betab01
CVE-2019-13482 · HIGH Severity
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings.
Learn more about our Web Application Penetration Testing UK.