CVE-2019-16057

CRITICAL KEV RANSOMWARE NUCLEI

D-Link DNS-320 - Command Injection

Title source: llm

Description

The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

Nuclei Templates (1)

D-Link DNS-320 - Remote Code Execution
CRITICALVERIFIEDby DhiyaneshDk
Shodan: html:"ShareCenter" || http.html:"sharecenter"
FOFA: body="sharecenter"

References (3)

Scores

CVSS v3 9.8
EPSS 0.9405
EPSS Percentile 99.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CISA KEV 2022-04-15
VulnCheck KEV 2019-09-23
InTheWild.io 2022-04-15
ENISA EUVD EUVD-2019-6920
Ransomware Use Confirmed
CWE
CWE-78
Status published
Products (1)
dlink/dns-320_firmware < 2.05.b10
Published Sep 16, 2019
KEV Added Apr 15, 2022
Tracked Since Feb 18, 2026