RULE(RULE ID:324088)

Rule General Information
Release Date: 2020-01-19
Rule Name: D-Link DIR-825 Default Credentials Vulnerability (CVE-2019-9123)
Severity:
CVE ID:
Rule Protection Details
Description: The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Others
Reference: https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/Permission%20access%20control.md
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.dlink.com/