CVE-2024-57595
DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote attackers to execute arbitrary commands v…
Published: 2025-01-27 · CVSS: 9.8 · CVSS 3.1
DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wps_pin" passed to the apc_client_pin.cgi binary through a POST request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7