critical9.8
CVE-2019-17508
On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.
Impact
On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-859 A3 Firmware | Version 1.06 |
| Dlink | Dir-850l A Firmware | Version 1.13 |