CVEs-PoC/2016/CVE-2016-11021.md

CVE-2016-11021

Description

setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter.

POC

Reference

• https://www.exploit-db.com/exploits/39437
• https://www.exploit-db.com/exploits/39437

Github

• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/ker2x/DearDiary