This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2021-27249 | BDVDB-2026-152125 Detail

D-LinkDAP-2020

Description#

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11369.

Impact#

Per CVSS v3.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: adjacent.

Weaknesses#

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.