CVE-2020-12774 HIGH

CVE-2020-12774: D-Link DSL-7740C - Command Injection

Vendor D-Link
Product DSL-7740C
Weakness CWE-78
Published July 22, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command.

Key dates

02Disclosure timeline

July 22, 2020 CVE published
September 16, 2024 Record updated