peter bassill · operator
$ cve CVE-2019-17621 JSON

CVE-2019-17621 KEV

9.8
CRITICAL · CVSS 3.1 · EPSS 89.6% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2023-07-20.

Description

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS89.62% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-78
On CISA KEVyes — remediate by 2023-07-20
Public exploitnone known
Published2019-12-30
Last modified2026-06-17

CISA KEV

NameD-Link DIR-859 Router Command Execution Vulnerability
Added2023-06-29
Due2023-07-20
Vendor / productD-Link / DIR-859 Router
Ransomware usenone reported

Affected (28)

VendorProduct
dlinkdir-818lx
dlinkdir-818lx firmware
dlinkdir-822
dlinkdir-822 firmware
dlinkdir-823
dlinkdir-823 firmware
dlinkdir-859
dlinkdir-859 firmware
dlinkdir-865l
dlinkdir-865l firmware
dlinkdir-868l
dlinkdir-868l firmware
dlinkdir-869
dlinkdir-869 firmware
dlinkdir-880l
dlinkdir-880l firmware
dlinkdir-885l
dlinkdir-885l firmware
dlinkdir-885r
dlinkdir-885r firmware
dlinkdir-890l
dlinkdir-890l firmware
dlinkdir-890r
dlinkdir-890r firmware
dlinkdir-895l
dlinkdir-895l firmware
dlinkdir-895r
dlinkdir-895r firmware

References

→ the Explorer  ·  watch your stack  ·  NVD