CVE-2018-7859
A security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1.31.B003 and older that may allow a remote attacker to inject malicious scripts in the device and execute commands via browser that is configuring the unit.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2019-12-30
- Last modified
- 2024-08-05
- Weaknesses
- CWE-79
Affected products
- Dgs-1510-20 Firmware (Dlink)
- Dgs-1510-28 Firmware (Dlink)
- Dgs-1510-28p Firmware (Dlink)
- Dgs-1510-28x Firmware (Dlink)
- Dgs-1510-28xmp Firmware (Dlink)
- Dgs-1510-52 Firmware (Dlink)
- Dgs-1510-52x Firmware (Dlink)
- Dgs-1510-52xmp Firmware (Dlink)
References
- http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10082
