CVE-2021-27249

CWE-78 — OS Command Injection3 documents3 sources

Severity

8.8HIGH

EPSS

1.1%

top 22.31%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

D-link Dap-2020 Dlink Dap-2020 Firmware

Timeline

PublishedApr 14

Latest updateMay 24

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11…

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5d-link/dap-2020v1.01rc001

▶NVDdlink/dap-2020_firmware1.01

Patches

Patch: supportannouncement.us.dlink.com ↗Patch: supportannouncement.us.dlink.com ↗

🔴Vulnerability Details

GHSA

GHSA-q7xv-685x-6h27: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1↗2022-05-24

▶

CVEList

CVE-2021-27249: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1↗2021-04-14

▶