Dir 895la1 Firmware
1 CVEs
product
Monthly
D-Link DIR-895L router has command injection in the DHCP daemon via the hostname parameter during lease renewal. Any device requesting a DHCP lease with a malicious hostname achieves root code execution on the router. PoC available.
Command Injection
D-Link
Dir 895la1 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.5%
EPSS 2%
CVSS 9.8
CRITICAL
POC
Act Now
D-Link DIR-895L router has command injection in the DHCP daemon via the hostname parameter during lease renewal. Any device requesting a DHCP lease with a malicious hostname achieves root code execution on the router. PoC available.
Command Injection
D-Link
Dir 895la1 Firmware
NVD