D-Link DIR-825
cpe:2.3:h:d-link:dir-825/a:*:*:*:*:*:*:*, +5 more
An OS command injection vulnerability has been identified in the D-Link DIR-825 REV B2.03 router. The issue resides in the CGl interface, specifically within the apc_client_pin.cgi script. This vulnerability allows remote attackers to execute arbitrary commands by sending a POST request with the 'wps_pin' parameter to the apc_client_pin.cgi binary.
Exploitation of this vulnerability allows for arbitrary command execution on the affected device.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.