Back to Database
Status published
Medium
CVE-2019-14337
An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax...
Vulnerability Description
An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is an ability to escape to a shell in the restricted command line interface, as demonstrated by the `/bin/sh -c wget` sequence.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-14337
Credits & Attribution
No credits recorded in the NVD database.
References
More from dlink
View All →CVE-2022-48108
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability...
Unknown
0
CVE-2022-48107
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability...
Unknown
0
CVE-2022-47035
Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows...
Unknown
0
CVE-2022-46642
D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection...
Unknown
0
CVE-2022-46641
D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection...
Unknown
0
Affected Vendor
dlink
View all reports →Affected Software
6600-ap firmware, dwl-3600ap firmware
Vulnerable Versions:
4.2.0.14
Timeline
Official Publish:
August 1st, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.