Command Injection Vulnerability in D-Link DIR-818LW Firmware 2.06betab01

Command Injection Vulnerability in D-Link DIR-818LW Firmware 2.06betab01

CVE-2019-13482 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings.

Learn more about our Web Application Penetration Testing UK.