Dwl-2600ap
Vulnerabilities
5
Known exploited
1
Max CVSS
7.8
Top EPSS
0.96635
Severity breakdown
Critical
0
High
5
Medium
0
Low
0
Also matched as (raw): dwl-2600ap,dwl-2600ap_firmware
Top vulnerabilities
CVE-2023-0127A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root.
CVE-2019-20501D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.
CVE-2019-20500D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.
CVE-2019-20499D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter.
BDU:2023-02616Уязвимость функции сохранения конфигурации веб-интерфейса микропрограммного обеспечения беспроводных точек доступа D-Link DWL-2600AP связана с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы при обработке параметров admin.cgi?action=config_save configBackup и downloadServerip. Эксплуатация уязвимости может позволить нарушителю выполнить произвольные команды