← CVE Radar
CVE-2019-17621D-Link DIR-859 Router Command Execution Vulnerability
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
9.8 CRITICALEPSS 90.61%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jul 20, 2023
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Details
- CVE ID
- CVE-2019-17621
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Dec 30, 2019
- Last modified
- 2026-06-17 02:24 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
dlinkdir-859 firmware2 version ranges
- through 1.05b03
- 1.06b01 beta1
dlinkdir-822 firmware2 version ranges
- through 2.03b01
- through 3.12b04
dlinkdir-823 firmware2 version ranges
- through 1.00b06
- 1.00b06 beta
dlinkdir-865l firmware1 version range
- through 1.07b01
dlinkdir-868l firmware2 version ranges
- through 1.12b04
- through 2.05b02
dlinkdir-869 firmware2 version ranges
- through 1.03b02
- 1.03b02 beta02
dlinkdir-880l firmware1 version range
- through 1.08b04
dlinkdir-890l firmware2 version ranges
- through 1.11b01
- 1.11b01 beta01
dlinkdir-890r firmware2 version ranges
- through 1.11b01
- 1.11b01 beta01
dlinkdir-885l firmware1 version range
- through 1.12b05
dlinkdir-885r firmware1 version range
- through 1.12b05
dlinkdir-895l firmware1 version range
- through 1.12b10
dlinkdir-895r firmware1 version range
- through 1.12b10
dlinkdir-818lx firmware0 version ranges
No version detail published.
References
- packetstormsecurity.com http://packetstormsecurity.com/files/156054/D-Link-DIR-859-Unauthenticated-Remote-Command-Execution.html
- medium.com https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104
- medium.com https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9
- supportannouncement.us.dlink.com https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146
- supportannouncement.us.dlink.com https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147
- dlink.com https://www.dlink.com/en/security-bulletin
- ftc.gov https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-17621