CVE-2021-46441 | BDVDB-2026-174864 Detail

Description#

In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.dlink.com/en/security-bulletin/
https://github.com/tgp-top/D-Link-DIR-825

Exploit#

No public exploit known

History#

Version 12022-04-27Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.