Threats tagged 'ghsa-9459-cp56-77p3'

A command injection vulnerability exists in the D-Link DIR-823G router firmware version DIR823G_V1.0.2B05_20181207.bin. The flaw is in the timelycheck and sysconf binaries that process the /tmp/new_qos.rule configuration file without sanitizing input before executing commands. An attacker with write access to this file can execute arbitrary commands on the device.