EXPOSURES › CVE-2019-16057

CVE-2019-16057

CRITICAL ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-04-15 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-16057 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 95/100 ransomwarerceexploited-in-wild

A critical, actively exploited remote code execution vulnerability existed in D-Link's DNS-320 storage device, allowing attackers to execute arbitrary code remotely.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

D-Link · vendor DNS-320 Storage Device · product

DESCRIPTION

The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.