VYPR

Dir 866l Firmware

by Dlink

CVEs (2)

  • CVE-2019-16920CriKEVSep 27, 2019
    risk 0.84cvss 9.8epss 1.00

    Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who…

  • CVE-2019-17663MedOct 16, 2019
    risk 0.40cvss 6.1epss 0.01

    D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection.