A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-11-04T09:58:27
Updated: 2024-08-04T15:33:05.517Z
Reserved: 2020-09-14T00:00:00
Link: CVE-2020-25367
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-11-04T10:15:07.673
Modified: 2024-11-21T05:17:54.440
Link: CVE-2020-25367
Redhat
No data.