Di 8200g Firmware
Monthly
Command injection in D-Link DI-7300G+ and DI-8200G routers allows remote authenticated attackers to execute arbitrary OS commands via the msp_info.htm endpoint. Affected firmware versions include 17.12.20A1 and 19.12.25A1. Exploit code is publicly available, but no active exploitation has been confirmed, and EPSS indicates a low exploitation probability of 0.20%.
Command injection in D-Link DI-7300G+ and DI-8200G routers allows remote authenticated attackers to execute arbitrary OS commands via the msp_info.htm endpoint. Affected firmware versions include 17.12.20A1 and 19.12.25A1. Exploit code is publicly available, but no active exploitation has been confirmed, and EPSS indicates a low exploitation probability of 0.20%.