← All advisories

Critical severity9.8NVD Advisory· Published Oct 11, 2019· Updated Jun 17, 2026

CVE-2019-17508

CVE-2019-17508

Description

On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Dlink/Dir 850l A Firmware
cpe:2.3:o:dlink:dir-850l_a_firmware:1.13:*:*:*:*:*:*:*
Dlink/Dir 859 A3 Firmware
cpe:2.3:o:dlink:dir-859_a3_firmware:1.06:*:*:*:*:*:*:*
D-Link/DIR-859description
Dlink/DIR850llm-create
Range: A1.13
Dlink/DIR-859llm-create
Range: A3-1.06

Patches

Vulnerability mechanics

References

1

github.com/dahua966/Routers-vuls/tree/master/DIR-859nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.