D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.
CPE | Name | Operator | Version |
---|---|---|---|
dwl-2600ap_firmware | le | 4.2.0.15 |