Security Advisory

CVE-2021-28144

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-03-11 16:02:05

Last updated 2024-08-03 21:33:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely.

← Browse all CVEs View on cve.org ↗