Threats tagged 'ghsa-55jg-7rxj-hh46'

A remote OS command injection vulnerability exists in D-Link DNS-320 firmware version 2.06B01. The flaw is located in multiple functions within the /cgi-bin/network_mgr.cgi file, allowing an attacker with high privileges to execute arbitrary operating system commands remotely. Public exploit code is available for this vulnerability. The CVSS score is 4.7, indicating a medium severity level.