CVE-2018-25120

CVE-2018-25120 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including GulfTech Security.

AI-analyzed exploit summary This is a detailed writeup describing a command injection vulnerability in D-Link DNS-343 ShareCenter <= 1.05. The vulnerability allows unauthenticated remote attackers to execute arbitrary commands as root via the '/goform/Mail_Test' endpoint.

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/Mail_Test' and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.