deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-5336
Published: 2019-10-11
Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://vuldb.com/?id.142993; https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory[PII_REDACTED]; https://vuldb.com/?id.142993
CVE: CVE-2010-5337
Published: 2019-10-11
Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][controller] is non-persistent in 10.1.3 and 10.2.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://vuldb.com/?id.142993; https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory[PII_REDACTED]; https://vuldb.com/?id.142993
CVE: CVE-2010-5338
Published: 2019-10-11
Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://vuldb.com/?id.142993; https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory[PII_REDACTED]; https://vuldb.com/?id.142993
CVE: CVE-2010-5339
Published: 2019-10-11
Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in 10.1.3 and 10.2.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://vuldb.com/?id.142993; https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory[PII_REDACTED]; https://vuldb.com/?id.142993
CVE: CVE-2010-5340
Published: 2019-10-11
Description: IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://vuldb.com/?id.142993; https://www.gosecurity.ch/component/content/article/12-services/gosecuritynews/fachartikel/169-gosecurity-advisory[PII_REDACTED]; https://vuldb.com/?id.142993
CVE: CVE-2019-17499
Published: 2019-10-11
Description: The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the Target_IP parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://gbti.pl/public/10_2019-compal.txt; https://gbti.pl/public/10_2019-compal.txt
CVE: CVE-2019-14510
Published: 2019-10-11
Description: An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature creates a local account FSAdminxxxxxxxxx (e.g., FSAdmin123456789) on the server that hosts the LAN Cache and all clients that are assigned to a LAN Cache. This account is placed into the local Administrators group of all clients assigned to the LAN Cache. When the assigned client is a Domain Controller, the FSAdminxxxxxxxxx account is created as a domain account and automatically added as a member of the domain BUILTIN\Administrators group. Using the well known Pass-the-Hash techniques, an attacker can use the same FSAdminxxxxxxxxx hash from any LAN Cache client and pass this to a Domain Controller, providing administrative rights to the attacker on any Domain Controller. (Local account Pass-the-Hash mitigations do not protect domain accounts.)
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276, CWE-287
References: http://community.kaseya.com/xsp/f/355.aspx; http://community.kaseya.com/xsp/f/355/t/24675.aspx; https://lockstepgroup.com/blog/abusing-the-kaseya-lan-cache-fsadmin/
CVE: CVE-2019-17059
Published: 2019-10-11
Description: A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://community.sophos.com/kb/en-us/134732; https://community.sophos.com/products/cyberoamos/; https://thebestvpn.com/cyberoam-preauth-rce/
CVE: CVE-2019-17503
Published: 2019-10-11
Description: An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL queries within this batch file. This file exposes SQL database information such as database version, table name, column name, etc.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425
References: http://packetstormsecurity.com/files/154838/Kirona-DRS-5.5.3.5-Information-Disclosure.html; https://github.com/Ramikan/Vulnerabilities/blob/master/Kirona-DRS%205.5.3.5%20Multiple%20Vulnerabilities; http://packetstormsecurity.com/files/154838/Kirona-DRS-5.5.3.5-Information-Disclosure.html
CVE: CVE-2019-17504
Published: 2019-10-11
Description: An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154838/Kirona-DRS-5.5.3.5-Information-Disclosure.html; https://github.com/Ramikan/Vulnerabilities/blob/master/Kirona-DRS%205.5.3.5%20Multiple%20Vulnerabilities; http://packetstormsecurity.com/files/154838/Kirona-DRS-5.5.3.5-Information-Disclosure.html
CVE: CVE-2019-6333
Published: 2019-10-11
Description: A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version 4.1.4.2827. This vulnerability may allow a local attacker with administrative privileges to execute arbitrary code via an HP Touchpoint Analytics system service.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://safebreach.com/Post/HP-Touchpoint-Analytics-DLL-Search-Order-Hijacking-Potential-Abuses-CVE-2019-6333; https://support.hp.com/us-en/document/c06463166; https://safebreach.com/Post/HP-Touchpoint-Analytics-DLL-Search-Order-Hijacking-Potential-Abuses-CVE-2019-6333
CVE: CVE-2015-9481
Published: 2019-10-11
Description: The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9482
Published: 2019-10-11
Description: The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9483
Published: 2019-10-11
Description: The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9484
Published: 2019-10-11
Description: The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9485
Published: 2019-10-11
Description: The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2019-11120
Published: 2019-10-11
Description: Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00261.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00261.html
CVE: CVE-2019-11167
Published: 2019-10-11
Description: Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00286.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00286.html
CVE: CVE-2019-14569
Published: 2019-10-11
Description: Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00296.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00296.html
CVE: CVE-2019-14570
Published: 2019-10-11
Description: Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00296.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00296.html
CVE: CVE-2019-6335
Published: 2019-10-11
Description: A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to create a denial of service.
CVSS Score: 7.5 (HIGH)
References: https://support.hp.com/hr-en/document/c06461713; https://support.hp.com/hr-en/document/c06461713
CVE: CVE-2015-9486
Published: 2019-10-11
Description: The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9487
Published: 2019-10-11
Description: The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9488
Published: 2019-10-11
Description: The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9489
Published: 2019-10-11
Description: The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9490
Published: 2019-10-11
Description: The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9491
Published: 2019-10-11
Description: The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2015-9492
Published: 2019-10-11
Description: The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/131957/; https://packetstormsecurity.com/files/131957/
CVE: CVE-2019-2110
Published: 2019-10-11
Description: In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-69703445
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2019-10-01; https://source.android.com/security/bulletin/2019-10-01
CVE: CVE-2019-2114
Published: 2019-10-11
Description: In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This could lead to local escalation of privilege by installing an application with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-123700348
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2019-10-01; https://wwws.nightwatchcybersecurity.com/2019/10/24/nfc-beaming-bypasses-security-controls-in-android-cve-2019-2114/; https://source.android.com/security/bulletin/2019-10-01
CVE: CVE-2019-2173
Published: 2019-10-11
Description: In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-123013720
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2019-10-01; https://source.android.com/security/bulletin/2019-10-01
CVE: CVE-2019-2183
Published: 2019-10-11
Description: In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-136261465
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2019-10-01; https://source.android.com/security/bulletin/pixel/2019-10-01
CVE: CVE-2019-2184
Published: 2019-10-11
Description: In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-134578122
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-10-01; https://source.android.com/security/bulletin/2019-10-01
CVE: CVE-2019-2185
Published: 2019-10-11
Description: In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-136173699
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-10-01; https://source.android.com/security/bulletin/2019-10-01
CVE: CVE-2019-2186
Published: 2019-10-11
Description: In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-136175447
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-10-01; https://source.android.com/security/bulletin/2019-10-01
CVE: CVE-2019-2187
Published: 2019-10-11
Description: In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-124940143
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-191
References: https://source.android.com/security/bulletin/2019-10-01; https://source.android.com/security/bulletin/2019-10-01
CVE: CVE-2019-2215
Published: 2019-10-11
Description: A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/154911/Android-Binder-Use-After-Free.html; http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html; http://packetstormsecurity.com/files/156495/Android-Binder-Use-After-Free.html
CVE: CVE-2018-20582
Published: 2019-10-11
Description: The GREE+ (aka com.gree.greeplus) application 1.4.0.8 for Android suffers from Cross Site Request Forgery.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://medium.com/%40beefaaubee/dissecting-into-gree-android-application-43892d54b006; https://play.google.com/store/apps/details?id=com.gree.greeplus; https://medium.com/%40beefaaubee/dissecting-into-gree-android-application-43892d54b006
CVE: CVE-2018-21027
Published: 2019-10-11
Description: Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/gpg/boa/pull/1; https://github.com/gpg/boa/pull/1/commits/e139b87835994d007fbd64eead6c1455d7b8cf4e; https://github.com/gpg/boa/pull/1
CVE: CVE-2018-21028
Published: 2019-10-11
Description: Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://github.com/gpg/boa/pull/1; https://github.com/gpg/boa/pull/1/commits/e139b87835994d007fbd64eead6c1455d7b8cf4e; https://github.com/gpg/boa/pull/1
CVE: CVE-2019-17505
Published: 2019-10-11
Description: D-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as demonstrated by uplink_info.xml. An attacker can remotely obtain a user's Wi-Fi SSID and password, which could be used to connect to Wi-Fi or perform a dictionary attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/dahua966/Routers-vuls/blob/master/DAP-1320/vuls_poc.md; https://github.com/dahua966/Routers-vuls/blob/master/DAP-1320/vuls_poc.md
CVE: CVE-2019-17506
Published: 2019-10-11
Description: There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's username and password (and other information) via a DEVICE.ACCOUNT value for SERVICES in conjunction with AUTHORIZED_GROUP=1%0a to getcfg.php. This could be used to control the router remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/dahua966/Routers-vuls/blob/master/DIR-868/name%26passwd.py; https://github.com/dahua966/Routers-vuls/blob/master/DIR-868/name%26passwd.py
CVE: CVE-2019-17507
Published: 2019-10-11
Description: An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dir_login.asp"' line in a .asp file. This provides access to d_status.asp, version.asp, d_dhcptbl.asp, and d_acl.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/dahua966/Routers-vuls/tree/master/DIR-816; https://github.com/dahua966/Routers-vuls/tree/master/DIR-816
CVE: CVE-2019-17508
Published: 2019-10-11
Description: On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/dahua966/Routers-vuls/tree/master/DIR-859; https://github.com/dahua966/Routers-vuls/tree/master/DIR-859
CVE: CVE-2019-17509
Published: 2019-10-11
Description: D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/dahua966/Routers-vuls/blob/master/DIR-846/vuls_info.md; https://github.com/dahua966/Routers-vuls/blob/master/DIR-846/vuls_info.md
CVE: CVE-2019-17510
Published: 2019-10-11
Description: D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/dahua966/Routers-vuls/blob/master/DIR-846/vuls_info.md; https://github.com/dahua966/Routers-vuls/blob/master/DIR-846/vuls_info.md