RULE(RULE ID:337982)

Rule General Information
Release Date: 2024-05-06
Rule Name: D-Link DIR-300/DIR-600 diagnostic.php Command Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: D-Link is a company that provides network equipment and solutions. There is a command injection vulnerability in the DIR-300 and DIR-600 version diagnotic.php program. An attacker can execute any operating system command on the server through the vulnerability to obtain the server permissions.
Impact: An attacker can execute arbitrary command via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.