DCS-930L Devices · Sandworm Watch

Mar 25, 2022high

CVE-2016-11021: D-Link DCS-930L Devices OS Command Injection Vulnerability

setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command. Required action: The impacted product is end-of-life and should be disconnected if still in use.

CVE-2016-11021EPSS 68.5%D-LinkDCS-930L Devices

CISA KEV ↗ · unattributed attribution