CyberRota Analysis
AI-GeneratedD-Link DWR-M961 devices with hardware version C1 and firmware versions prior to 1.1.5_C1_202607071108 are susceptible to a critical command injection vulnerability that allows remote attackers to execute arbitrary commands with root privileges. This poses a significant risk as it can lead to full system compromise. Organizations using these devices should prioritize patching to mitigate potential exploitation.
Original NVD Description
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formTracerouteDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host and ipVer fields, resulting in command execution with root privileges.