D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.
CPE | Name | Operator | Version |
---|---|---|---|
dwl-2600ap_firmware | le | 4.2.0.15 |