CyberRota Analysis
AI-GeneratedD-Link DWR-M921 version 1.1.52 is vulnerable to OS command injection through the manipulation of the `folderpath` argument in the `/boafrm/formDiskCreateShare` function, allowing attackers to execute arbitrary commands remotely. This critical vulnerability poses a significant risk to the confidentiality, integrity, and availability of affected systems. Organizations using this device should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.