critical9.0Public exploit code
CVE-2015-2049
Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploadi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DCS-931L - Arbitrary File Upload (Metasploit)2016-01-07 · webapps · hardware · Verified
Impact
Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dcs-931l Firmware | through 1.04 |
References
- NVD record
- CVE.org record
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10049
- http://www.kb.cert.org/vuls/id/377348
- https://www.exploit-db.com/exploits/39192/
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10049
- http://www.kb.cert.org/vuls/id/377348
- https://www.exploit-db.com/exploits/39192/