Firetruck

CVE-2019-20500

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
n/an/a / n/an/aaffected