What is the CVSS score of CVE-2019-17621?

CVE-2019-17621 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 89.6%.

Is there a public PoC exploit available for CVE-2019-17621?

Yes, a public proof-of-concept exploit is available for CVE-2019-17621. Prioritise patching immediately. EPSS: 89.6%.

Is there a patch available for CVE-2019-17621?

Yes, a patch is available for CVE-2019-17621. Update the affected software to the latest version immediately.

Dir 859 Firmware CVE-2019-17621

CRITICAL

OS Command Injection (CWE-78)

2019-12-30 cve@mitre.org

D-Link Command Injection Dir 859 Firmware Dir 822 Firmware Dir 823 Firmware Dir 865L Firmware Dir 868l Firmware Dir 869 Firmware Dir 880L Firmware Dir 890L Firmware Dir 890R Firmware Dir 885L Firmware Dir 885R Firmware Dir 895L Firmware Dir 895R Firmware Dir 818Lx Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Added to CISA KEV

Jul 14, 2026 - 04:22 CISA

CVE Published

Dec 30, 2019 - 17:15 nvd

CRITICAL 9.8

DescriptionNVD

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.

AnalysisAI

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network. Affected products include: Dlink Dir-859 Firmware, Dlink Dir-822 Firmware, Dlink Dir-823 Firmware, Dlink Dir-865L Firmware, Dlink Dir-868L Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.