Vulnerabilities > CVE-2019-19597 - Incorrect Authorization vulnerability in Dlink Dap-1860 Firmware 1.01B06/1.02B01/1.04B01

047910
CVSS 8.8 - HIGH
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
dlink
CWE-863
NVD
Published: 2019-12-05
Updated: 2024-11-21

Summary

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.

Vulnerable Configurations

Part Description Count
OS
Dlink
3
Hardware
Dlink
1

Common Weakness Enumeration (CWE)

References