CVE-2019-20501

2020-03-0514:36:08

mitre

www.cve.org

0.001 Low

EPSS

Percentile

37.6%

JSON

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.