D-Link DIR-513 OS Command Injection Vulnerability

Vulnerability

An OS command injection vulnerability has been identified in the D-Link DIR-513 router, specifically in version 1.10. The issue arises in an unknown function of the file '/goform/formSysCmd', where improper handling of the 'sysCmd' argument allows for command injection. This vulnerability can be exploited remotely and affects devices that are no longer supported by the manufacturer.

Impact

Exploitation of this vulnerability allows for OS command injection, where an attacker can execute arbitrary commands on the device's operating system.

Added: Mar 20, 2026, 2:18 AM
Updated: Mar 20, 2026, 2:18 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
8.7
remediation
0.0
relevance
4.2
threat
6.4
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.