Description
A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.
CVSS 4.7EPSS 4.5440000000000005%Risk 0.66
View source- Published
- 2026-05-11 05:16:16
- Affected versions
- <=2.06B01
- Type
- Firmware
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L