VYPR
Critical severity9.8CISA KEVNVD Advisory· Published Dec 30, 2019· Updated Jun 17, 2026

CVE-2019-17621

CVE-2019-17621

Description

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21
  • cpe:2.3:o:dlink:dir-818lx_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:o:dlink:dir-822_firmware:*:*:*:*:*:*:*:*
    Range: <=2.03b01
  • cpe:2.3:o:dlink:dir-823_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dlink:dir-823_firmware:*:*:*:*:*:*:*:*range: <=1.00b06
    • cpe:2.3:o:dlink:dir-823_firmware:1.00b06:beta:*:*:*:*:*:*
  • cpe:2.3:o:dlink:dir-859_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dlink:dir-859_firmware:*:*:*:*:*:*:*:*range: <=1.05b03
    • cpe:2.3:o:dlink:dir-859_firmware:1.06b01:beta1:*:*:*:*:*:*
  • cpe:2.3:o:dlink:dir-865l_firmware:*:*:*:*:*:*:*:*
    Range: <=1.07b01
  • cpe:2.3:o:dlink:dir-868l_firmware:*:*:*:*:*:*:*:*
    Range: <=1.12b04
  • cpe:2.3:o:dlink:dir-869_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dlink:dir-869_firmware:*:*:*:*:*:*:*:*range: <=1.03b02
    • cpe:2.3:o:dlink:dir-869_firmware:1.03b02:beta02:*:*:*:*:*:*
  • cpe:2.3:o:dlink:dir-880l_firmware:*:*:*:*:*:*:*:*
    Range: <=1.08b04
  • cpe:2.3:o:dlink:dir-885l_firmware:*:*:*:*:*:*:*:*
    Range: <=1.12b05
  • cpe:2.3:o:dlink:dir-885r_firmware:*:*:*:*:*:*:*:*
    Range: <=1.12b05
  • cpe:2.3:o:dlink:dir-890l_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dlink:dir-890l_firmware:*:*:*:*:*:*:*:*range: <=1.11b01
    • cpe:2.3:o:dlink:dir-890l_firmware:1.11b01:beta01:*:*:*:*:*:*
  • cpe:2.3:o:dlink:dir-890r_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dlink:dir-890r_firmware:*:*:*:*:*:*:*:*range: <=1.11b01
    • cpe:2.3:o:dlink:dir-890r_firmware:1.11b01:beta01:*:*:*:*:*:*
  • cpe:2.3:o:dlink:dir-895l_firmware:*:*:*:*:*:*:*:*
    Range: <=1.12b10
  • cpe:2.3:o:dlink:dir-895r_firmware:*:*:*:*:*:*:*:*
    Range: <=1.12b10
  • D-Link/DIR-859 Wi-Fi routerdescription
  • Dlink/DIR-859llm-create
    Range: 1.05, 1.06B01 Beta01

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.