CyberRota Analysis
AI-GeneratedD-Link DWR-M961 devices with hardware version C1 and firmware versions prior to 1.1.5_C1_202607071108 are vulnerable to a command injection flaw that allows remote attackers to execute arbitrary commands with root privileges via the /boafrm/formDebugDiagnosticRun interface. This critical vulnerability poses a significant risk to the integrity and security of affected systems, making it essential for users and administrators of these devices to prioritize immediate updates to the latest firmware version.
Original NVD Description
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution with root privileges.