dwl-6610ap_firmware vulnerabilities

4 known vulnerabilities in dwl-6610ap_firmware from D-Link. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  dwl-6610ap_firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-43207Sep 20, 2023D-LinkEPSS 2.7%

  D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function config_upload_handler. This vulnerability allows attackers to execute arbitrary commands via the configRestore parameter.

• 9.8 Critical severity

  dwl-6610ap_firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-43206Sep 20, 2023D-LinkEPSS 2.72%

  D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function web_cert_download_handler. This vulnerability allows attackers to execute arbitrary commands via the certDownload parameter.

• 9.8 Critical severity

  dwl-6610ap_firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-43204Sep 20, 2023D-LinkEPSS 2.7%

  D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function sub_2EF50. This vulnerability allows attackers to execute arbitrary commands via the manual-time-string parameter.

• 9.8 Critical severity

  dwl-6610ap_firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-43202Sep 20, 2023D-LinkEPSS 2.7%

  D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function pcap_download_handler. This vulnerability allows attackers to execute arbitrary commands via the update.device.packet-capture.tftp-file-name parameter