CVE-2018-10967

On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that can be executed on…

published May 18, 2018

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that can be executed on the device with higher privileges, aka remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03775 · 89.8th percentile
Published
2018-05-18T14:00Z
EPSS history
Timeline
  • 18 MAY 14:00Z
    On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands that can be executed on…
    cvelistv5