high8.8
CVE-2020-10215
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.
Impact
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-825 Firmware | Version 2.10 |
| Trendnet | Tew-632brp Firmware | Version 1.010b32 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability2.md
- https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf
- https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability2.md
- https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf