| शीर्षक | D-Link DCS700l v1.03.09 Command Injection |
|---|
| विवरण | A Command Injection vulnerability has been discovered in the LightSensorControl parameter of D-Link DCS700l v1.03.09. The vulnerability arises from improper handling of user-controlled input, which is passed directly into a system command without sufficient sanitization. The LightSensorControl parameter is incorporated into a shell command (gpio lightcontrol %s &), and an attacker can manipulate it to inject arbitrary shell commands. This allows remote execution of malicious commands on the device, potentially compromising its integrity, leaking sensitive information, and facilitating further attacks. The lack of input validation and sanitization makes the device susceptible to malicious input exploitation. |
|---|
| स्रोत | ⚠️ https://tzh00203.notion.site/D-Link-DCS700l-v1-03-09-Command-Injection-Vulnerability-in-LightSensorControl-Parameter-2e6b5c52018a80ada0f6d7e72efd7a45?source=copy_link |
|---|
| उपयोगकर्ता | tian (UID 93438) |
|---|
| सबमिशन | 12/01/2026 02:45 PM (9 महीनों पहले) |
|---|
| संयम | 25/01/2026 03:14 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 342815 [D-Link DCS700l 1.03.09 Web Form /setDayNightMode LightSensorControl अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|