high7.2Known exploited
CVE-2016-11021
D-Link DCS-930L Devices OS Command Injection Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.
The impacted product is end-of-life and should be disconnected if still in use.
Impact
setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dcs-930l Firmware | before 2.12 |