Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

RULE（RULE ID：330455）

Rule General Information


Release Date:		2026-08-27

Rule Name:		D-Link __ajax_explorer Command Injection Vulnerability (CVE-2020-13782 CVE-2022-32092)

Severity:

CVE ID:

Rule Protection Details


Description:		D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection. The web interface for this router is controlled by the backend engine called cgibin.exe. Most requests for web pages are sent to this controller. If a request for scandir.sgi is made, a malicious actor can inject arbitrary code to be executed on the router with administrative privileges.

Impact:		An attacker can execute arbitrary command via a successful exploit in the context of the vulnerable software.

Affected OS:		Network Device

Reference:		https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10174 https://unit42.paloaltonetworks.com/6-new-d-link-vulnerabilities-found-on-home-routers/

Solutions

The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10174