CVE-2018-10967

On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that can be executed on the device with higher privileges, aka remote code execution.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-05-18

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Dir-550a Firmware (D-link)
• Dir-604m Firmware (D-link)

References

• https://fortiguard.com/zeroday/FG-VD-18-060