cbcvebase.
CVE-2020-10213
published 2020-03-07

CVE-2020-10213: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter…

high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.

Affected

2 ranges
VendorProductVersion rangeFixed in
dlinkdir-825_firmware
trendnettew-632brp_firmware