Threats tagged 'ghsa-hx88-32mr-g2vv'

A command injection vulnerability exists in the system function of the /boafrm/formDebugDiagnosticRun file in D-Link devices DWR-M920, DWR-M921, DIR-822K, and DIR-825M version 1.1.5. The vulnerability allows remote attackers to manipulate the 'host' argument to execute arbitrary commands. Public exploit code has been disclosed. The CVSS 3.1 base score is 6.3, indicating a medium severity impact.