An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntp_server parameter in an ntp_sync.cgi POST request.
References
Link | Resource |
---|---|
https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/command%20injection.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
27 Apr 2023, 14:30
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:dlink:dir-825_rev.b_firmware:2.10:*:*:*:*:*:*:* |
26 Apr 2023, 18:55
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:dlink:dir-825_rev.b:-:*:*:*:*:*:*:* |
Information
Published : 2019-02-25 05:29
Updated : 2024-02-04 20:03
NVD link : CVE-2019-9122
Mitre link : CVE-2019-9122
CVE.ORG link : CVE-2019-9122
JSON object : View
Products Affected
dlink
- dir-825_rev.b
- dir-825_rev.b_firmware
CWE