CyberRota Analysis
AI-GeneratedD-Link DWR-M961 devices with hardware version C1 and firmware versions prior to 1.1.5_C1_202607071108 are vulnerable to a command injection flaw in the /boafrm/formWsc interface, allowing remote attackers to execute arbitrary commands with root privileges. This critical vulnerability poses a significant risk to network security, as it can lead to unauthorized access and control over the device. Organizations using these devices should prioritize immediate updates to mitigate potential exploitation.
Original NVD Description
D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary malicious commands into the localPin, targetAPSsid, peerPin, and peerRptPin fields, resulting in command execution with root privileges.