VULNERABILITY INTELLIGENCE

CVE-2019-20501

CVSS score7.8 HIGH

EPSS probability89.76%

CISA KEVNot currently listed

Published2020-03-05

Last modified2026-06-17

Description

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.