| शीर्षक | D-Link DI_7300G+ Gateway/Router V 19.12.25A1 OS command Execution |
|---|
| विवरण | A critical remote os command execution vulnerability has been identified in the D-Link DI-7300G+ enterprise gateway. The vulnerability exists in the /version_upgrade.asp endpoint. This flaw allows an unauthenticated remote attacker to execute arbitrary operating system commands on the underlying system with elevated privileges.
The vulnerability arises due to insufficient input validation and sanitization of user-supplied data within the HTTP POST request handler for the version_upgrade.asp page. By crafting a malicious POST request containing shell metacharacters and arbitrary commands, an attacker can bypass intended security restrictions. The injected commands are subsequently executed by the device's operating system with root or system-level permissions. |
|---|
| स्रोत | ⚠️ https://github.com/DavCloudz/cve/blob/main/D-link/DI_7300G/DI_7300G+V-19.12.25A1%20OS%20execution%20vulnerability.md |
|---|
| उपयोगकर्ता | Yun Zhang (UID 90491) |
|---|
| सबमिशन | 29/10/2025 04:20 AM (12 महीनों पहले) |
|---|
| संयम | 14/11/2025 09:14 AM (16 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 276855 [D-Link DI-7400G+V2 version_upgrade.asp अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|