D-Link DWL-2600AP Access Point Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 29/06/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| DWL-2600AP Access Point | Versions not published yet (product named by CISA KEV) | |
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free