high8.8
CVE-2018-10967
On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that can be executed on…
Impact
On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that can be executed on the device with higher privileges, aka remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | Dir-550a Firmware | through 2.10kr |
| D-Link | Dir-604m Firmware | through 2.10kr |