Unrated
D-Link DIR-859 Router Command Execution Vulnerability
D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network. CISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Announced Group revision 1
Original source ↗CVE-2019-17621
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: kev:CVE-2019-17621
DIR-859 Router
Source reference: /product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
- Related CVEs
- CVE-2019-17621
Source reference:
/cveID
Publisher severity
No explicit severity was provided.
- Event
- #1293 · Revision 1
- Added to Heist Feed
- Publisher date