High severity8.8NVD Advisory· Published Feb 25, 2019· Updated Jun 17, 2026
CVE-2019-9122
CVE-2019-9122
Description
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntp_server parameter in an ntp_sync.cgi POST request.
Affected products
2- cpe:2.3:o:dlink:dir-825_rev.b_firmware:2.10:*:*:*:*:*:*:*
- Range: 2.10
Patches
Vulnerability mechanics
References
1- github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/command%20injection.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.