Remote Code Execution Vulnerability in D-Link DAP-1860 Devices

CVE-2019-19597

Summary

The D-Link DAP-1860 devices prior to version 1.04b03 Beta are susceptible to a remote code execution vulnerability. This flaw allows attackers to execute arbitrary commands with root privileges without any authentication, leveraging shell metacharacters embedded within the HNAP_AUTH HTTP header. The exploitation of this vulnerability could result in compromised network security, granting unauthorized access to sensitive information and control over the affected devices.

References