D-Link · DIR-859 Router
CVE-2019-17621
D-Link DIR-859 Router Command Execution Vulnerability
O que é
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
CISA: D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
O que fazer
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Prazo para as agências federais dos EUA: 20 de julho de 2023
- Adicionada à lista da CISA
- 29 de junho de 2023
- Publicada
- 30 de dezembro de 2019
- Gravidade
- Crítica 9,8 CVSS 3.1
- Chance de ataques nos próximos 30 dias (EPSS)
- 91% entre os 0,2% mais altos de todas as vulnerabilidades conhecidas
- Fraqueza
- CWE-78
- Mais detalhes
- NVD · CVE.org · CISA
Todas as referências (7)
- https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf
- https://www.dlink.com/en/security-bulletin
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146
- https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104
- https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9
- http://packetstormsecurity.com/files/156054/D-Link-DIR-859-Unauthenticated-Remote-Command-Execution.html
Mais falhas exploradas de D-Link
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 25 de jun. de 2025 | D-Link DIR-859 Router Path Traversal | DIR-859 Router | Média 5,3 | 83% |
| 24 de abr. de 2026 | Command Injection | DIR-823X | Alto 7,2 | 88% |
| 8 de dez. de 2025 | Buffer Overflow | Routers | Crítica 9,8 | 56% |
| 5 de ago. de 2025 | Unspecified | DCS-2530L and DCS-2670L Devices | Alto 7,5 | 98% |
| 5 de ago. de 2025 | DCS-2530L and DCS-2670L Command Injection | DCS-2530L and DCS-2670L Devices | Alto 8,8 | 54% |
| 5 de ago. de 2025 | Download of Code Without Integrity Check | DNR-322L | Alto 8,8 | 34% |
| 30 de set. de 2024 | OS Command Injection | DIR-820 Router | Crítica 9,8 | 98% |
| 16 de mai. de 2024 | Information Disclosure | DIR-605 Router | Alto 7,5 | 87% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.