60
CVE-2019-19597
- CVSS 3.1
- 8.8 high
- EPSS
- 21%p98
- Published
- ·
- Modified
Description · NVD
D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.
- Vendors
- dlink
- Products
- dap-1860 firmware
- Weakness
- CWE-863
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H