Dwl-2600ap Firmware vulnerabilities

2 known vulnerabilities in Dwl-2600ap Firmware from D-Link. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  D-Link DWL-2600AP with firmware v4.2.0.17: Improper Neutralization of Special Elements used in a Command

  CVE-2023-0127Feb 11, 2023D-Link DWL-2600AP with firmware v4.2.0.17EPSS 1.98%

  A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root.

• 7.8 High severity

  D-Link DWL-2600AP Access Point Command Injection Exploited

  CVE-2019-20500Mar 5, 2020D-LinkEPSS 96.7%

  D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip par