D-Link DI-8100 Command Injection Vulnerability Allowing Privileged Shell Access

A command injection vulnerability has been identified in the D-Link DI-8100 router, specifically in version 16.07.26A1. This vulnerability allows attackers to execute arbitrary commands by sending specially crafted HTTP requests. Exploiting this flaw could lead to unauthorized command execution with the highest privileges, providing shell access to the firmware system.

Impact

Exploitation of this vulnerability allows for command injection, with the executed commands running in a privileged context, potentially leading to unauthorized access or control over the device.