Threat intelligence / Vulnerability
CVE-2019-17621
D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
Vulnerability
TypeVulnerability
External ID—
First seen2023-06-29
Last seen2023-06-29
Confidence
—
D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
Labels
CISA KEV context
Vendor / productD-Link DIR-859 Router
Added2023-06-29
Due date2023-07-20
6 recorded
Relationships
2 external