D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usb_paswd.asp. This vulnerability allows attackers to execute arbitrary commands via the name parameter.
Search vulnerabilities
CVE-2021-46229
CVSS 3.1 · 9.8 Critical
EPSS 4.4%
KEV · Not listed
Vendors
Products
CVE-2021-46228
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpd_debug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter.
CVSS 3.1 · 9.8 Critical
EPSS 3.7%
KEV · Not listed
Vendors
Products
CVE-2021-46227
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxy_client.asp. This vulnerability allows attackers to execute arbitrary commands via the proxy_srv, proxy_srvport, proxy_lanip, proxy_lanport parameters.
CVSS 3.1 · 9.8 Critical
EPSS 4.7%
KEV · Not listed
Vendors
Products
CVE-2021-46226
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wget_test.asp. This vulnerability allows attackers to execute arbitrary commands via the url parameter.
CVSS 3.1 · 9.8 Critical
EPSS 3.7%
KEV · Not listed
Vendors
Products