EDB-48037
functionalD-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2020-02-10catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-20215US | critical9.8 | Exploit | ||
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because HTT… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan