Firetruck

CVE-2016-11021

KEV

D-Link DCS-930L Devices OS Command Injection Vulnerability

View CVE record →
Vendor / Project
D-Link
Product
DCS-930L Devices
Date added
Mar 25, 2022
Due date
Apr 15, 2022
Known ransomware use
Unknown
CWEs
CWE-78

Description

setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes