High severity7.8NVD Advisory· Published Mar 5, 2020· Updated Jun 17, 2026

CVE-2019-20501

Description

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dwl 2600ap Firmware
cpe:2.3:o:dlink:dwl-2600ap_firmware:*:*:*:*:*:*:*:*
Range: <=4.2.0.15
D-Link/DWL-2600APdescription
Dlink/DWL-2600APllm-create
Range: 4.2.0.15 Rev A

Patches

Vulnerability mechanics

References

supportannouncement.us.dlink.com/announcement/publication.aspxnvdPatchVendor Advisory
www.exploit-db.com/exploits/46841nvdExploitThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.072
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000