Approved changes feed: RSS · Atom

cpe:2.3:o:d-link:dsl-2640u_firmware:im_1.00:*:*:*:*:*:*:*

part: o version: im_1.00 update: *

VendorD Link (f324da99-07b9-589f-a800-1ce04a08f309)
ProductDsl 2640U Firmware (58e3e721-39b8-55c8-83b6-df8c313e2f03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5371 vulnerable 2026-06-08 05:11:50.678265 Details available
diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request.
Published: 2018-01-12T09:00:00.000Z
Updated: 2024-08-05T05:33:44.179Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.