Vulnerabilities (CVE)

Filtered by vendor Dlink Subscribe
Filtered by product Dir-3060
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-28144 1 Dlink 2 Dir-3060, Dir-3060 Firmware 2021-04-23 9.0 HIGH 8.8 HIGH
prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely.