VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 24, 2021· Updated Jun 17, 2026

CVE-2021-39509

CVE-2021-39509

Description

An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell metacharacters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Dlink/Dir 816 Firmware
    cpe:2.3:o:dlink:dir-816_firmware:1.10cnb05_r1b011d88210:*:*:*:*:*:*:*
  • D-Link/DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210description
  • Dlink/DIR-816A2llm-create
    Range: FWv1.10CNB05_R1B011D88210
  • Dlink/DIR-816llm-create
    Range: FWv1.10CNB05_R1B011D88210

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.