This vulnerability affects the D-Link DIR-816 router running firmware version 1.10CNB05_R1B011D88210. The issue is a command injection in the sub_445E7C function within the /goform/formDMZ.cgi endpoint, allowing an attacker to remotely execute arbitrary commands on the device. The vulnerability requires low attack complexity and no privileges or user interaction, but has low impact on confidentiality, integrity, and availability. Exploit code is publicly available, but no known exploits in the wild have been reported. The vendor has not released an official fix or patch at this time.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected router, potentially compromising device control. The impact on confidentiality, integrity, and availability is rated low, but the presence of public exploit code increases the risk of exploitation. No known active exploitation has been reported.

No official patch or remediation guidance is currently available from the vendor. Users should monitor the vendor's advisories for updates. Until a fix is released, consider limiting remote access to the affected device and disabling the DMZ feature if possible to reduce exposure.