← Database

CVE-2021-46441

HIGH CVSS: 8.8 Published: 2022-04-27 Modified: 2026-06-17

Description

In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.

Affected Platforms

Dlink Dir-825Dlink Dir-825 Firmware

Weakness Type

CWE-78

References