Product
A remote command injection vulnerability in the D-Link DWR-M920 router allows unauthenticated attackers to execute arbitrary system commands via the /boafrm/formPinManageSetup interface.