Skip to content
Threat Feed
Subscribe

Product

DWR-M961 (Hardware Version C1, Software Version 1.1.2_C1_202602110044)

1 brief RSS
critical advisory

Remote Command Injection in D-Link DWR-M961

D-Link DWR-M961 devices with hardware version C1 and firmware versions prior to 1.1.5_C1_202607071108 are vulnerable to unauthenticated command injection via the fota_url parameter.

DWR-M961 +3 vulnerability remote-code-execution network-security
1r 1t 13c