← Back

Dch M225 Firmware

dch-m225_firmware

Vendor: Dlink • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-6842
1Dlink
1Dch M225 Firmware
Nov 21, 2024
Feb 21, 2020
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the media renderer name.
CVE-2020-6841
1Dlink
1Dch M225 Firmware
Nov 21, 2024
Feb 21, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php userName parameter.