CVE-2019-20501
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
45Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 90%
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.
Affected products
n/a · n/apublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/46841unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.