CVE-2020-26582

D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping…

published October 6, 2020

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping (aka res_config_action=3&res_config_id=18).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04791 · 91.9th percentile
Published
2020-10-06T15:27Z
EPSS history
Timeline
  • 06 OCT 15:27Z
    D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping…
    cvelistv5