Description
D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection.
References (2)
Core 2
Scores
CVSS v3
7.3
EPSS
0.0571
EPSS Percentile
90.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-77
Status
published
Products (1)
dlink/dcs-932l_firmware
2.18.01
Published
May 11, 2026
Tracked Since
May 11, 2026