R95
Monthly
OS command injection in the D-Link R95 (BE9500) router running firmware BE9500_1.00.16 allows an attacker to execute arbitrary operating-system commands on the device by supplying a crafted NTPServer argument that the /bin/ssi binary handles on behalf of the DHMAPI component. Exploitation requires reaching and authenticating to the router's management interface (PR:H in both the CVSS 4.0 vector and our independent CVSS 3.1 assessment), so this is a post-authentication flaw that becomes dangerous when admin credentials are default, weak, or reused. Publicly available exploit code exists (a public GitHub proof-of-concept), but no CISA KEV entry confirms active exploitation; the vulnerability scores 8.5 High under CVSS 4.0, driven by full confidentiality, integrity, and availability impact on the device.
OS command injection in the D-Link R95 (BE9500) router running firmware BE9500_1.00.16 allows an attacker to execute arbitrary operating-system commands on the device by supplying a crafted NTPServer argument that the /bin/ssi binary handles on behalf of the DHMAPI component. Exploitation requires reaching and authenticating to the router's management interface (PR:H in both the CVSS 4.0 vector and our independent CVSS 3.1 assessment), so this is a post-authentication flaw that becomes dangerous when admin credentials are default, weak, or reused. Publicly available exploit code exists (a public GitHub proof-of-concept), but no CISA KEV entry confirms active exploitation; the vulnerability scores 8.5 High under CVSS 4.0, driven by full confidentiality, integrity, and availability impact on the device.