Unauthenticated Multiple D-Link Routers RCE

Jijith Rajan

Published on

16 Jun 2021

Vulnerability

There are chances for the occurrence of remote code execution in D-Link products that includes DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825. This happens when an attacker sends arbitrary data to a “PingTest” device’s common gateway interface, which can result in a common injection. An attacker who executes the command injection could gain complete control of the system.

Mitigation / Precaution

We suggest you to upgrade the D-Link routers in order to fix this vulnerability.

Automated human-like penetration testing for your web apps & APIs

Teams using Beagle Security are set up in minutes, embrace release-based CI/CD security testing and save up to 65% with timely remediation of vulnerabilities. Sign up for a free account to see what it can do for you.

Product tour

Written by