{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-03T11:10:16.900","vulnerabilities":[{"cve":{"id":"CVE-2019-17621","sourceIdentifier":"cve@mitre.org","published":"2019-12-30T17:15:19.857","lastModified":"2026-06-17T02:24:17.420","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network."},{"lang":"es","value":"La URL de /gena.cgi del endpoint UPnP en el router  Wi-Fi D-Link DIR-859 versiones 1.05 y 1.06B01 Beta01, permite a un atacante remoto no autenticado ejecutar comandos del sistema como root, mediante el envío de una petición HTTP SUBSCRIBE especialmente diseñada en el servicio UPnP cuando se conecta a la red local."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-04T20:33:59.746115Z","id":"CVE-2019-17621","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-06-29","cisaActionDue":"2023-07-20","cisaRequiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","cisaVulnerabilityName":"D-Link DIR-859 Router Command Execution Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-859_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.05b03","matchCriteriaId":"C2ABCF49-625F-4267-8B6D-14081B31E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-859_firmware:1.06b01:beta1:*:*:*:*:*:*","matchCriteriaId":"BB555A1A-6B26-483E-ABFC-B64B928E7CC5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-859:-:*:*:*:*:*:*:*","matchCriteriaId":"D1DEEF5B-D8E9-45F3-8A89-52CE8402E6F5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-822_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.03b01","matchCriteriaId":"8F8E6CDA-679A-4A31-8D8D-BD283C5E1E3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-822:-:*:*:*:*:*:*:*","matchCriteriaId":"B3894F0E-37F8-4A89-87AC-1DB524D4AE04"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-822_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12b04","matchCriteriaId":"46B25758-8EC2-4598-A834-9D513B030629"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-822:-:*:*:*:*:*:*:*","matchCriteriaId":"B3894F0E-37F8-4A89-87AC-1DB524D4AE04"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-823_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.00b06","matchCriteriaId":"99D9046B-206E-4267-98BA-BF572682F134"},{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-823_firmware:1.00b06:beta:*:*:*:*:*:*","matchCriteriaId":"5A56D2BD-5160-46FE-8AC7-CB4CA50E4D5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-823:-:*:*:*:*:*:*:*","matchCriteriaId":"EC426833-BEA7-4029-BBBB-94688EE801BC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-865l_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.07b01","matchCriteriaId":"4406996E-761D-4EDC-9877-17B7472C1422"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-865l:-:*:*:*:*:*:*:*","matchCriteriaId":"F3A853DF-6DF1-4E8E-8D55-95279EE0CB30"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-868l_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12b04","matchCriteriaId":"F9D90548-24FD-416F-9159-6F7AB318C923"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-868l:-:*:*:*:*:*:*:*","matchCriteriaId":"33B501D4-BDDD-485E-A5A3-8AA8D5E46061"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-868l_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.05b02","matchCriteriaId":"0B0CA3A5-CF3D-4D1B-BB07-EE0D91901BC9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-868l:-:*:*:*:*:*:*:*","matchCriteriaId":"33B501D4-BDDD-485E-A5A3-8AA8D5E46061"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-869_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.03b02","matchCriteriaId":"499E8ADA-B4ED-42B2-B237-716A77BD546A"},{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-869_firmware:1.03b02:beta02:*:*:*:*:*:*","matchCriteriaId":"AF693676-C580-44CF-AAC6-6E38658FEAFB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-869:-:*:*:*:*:*:*:*","matchCriteriaId":"E9EB6E8E-03FA-4477-B97A-0752B7C443F0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-880l_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.08b04","matchCriteriaId":"AE7C571B-BCCB-4853-A08E-2EF9A64C94CD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-880l:-:*:*:*:*:*:*:*","matchCriteriaId":"CC772491-6371-4712-B358-E74D9C5062FD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-890l_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.11b01","matchCriteriaId":"50FCDBDC-32F8-42DF-BD3C-A9EFC11D036C"},{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-890l_firmware:1.11b01:beta01:*:*:*:*:*:*","matchCriteriaId":"7A4A1A68-5B14-47B7-9D02-274A0E4AF2F2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-890l:-:*:*:*:*:*:*:*","matchCriteriaId":"B1EA89C7-4655-43A3-9D2B-D57640D56C09"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-890r_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.11b01","matchCriteriaId":"DA0BEAAD-6330-47FE-A8F6-665C3F346619"},{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-890r_firmware:1.11b01:beta01:*:*:*:*:*:*","matchCriteriaId":"4C18C9D9-9418-441B-9367-91F86137245C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-890r:-:*:*:*:*:*:*:*","matchCriteriaId":"D678E889-3D74-4D16-84D0-41F547519A7F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-885l_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12b05","matchCriteriaId":"48D9C475-FB79-4D18-823C-0A3F01CB478E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-885l:-:*:*:*:*:*:*:*","matchCriteriaId":"AD481B64-A25D-4123-B575-20EC3C524D9C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-885r_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12b05","matchCriteriaId":"0261FBA8-D370-4581-B4AE-E8DBF4546C50"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-885r:-:*:*:*:*:*:*:*","matchCriteriaId":"8E0351A1-D161-468E-A2C4-1FB92E978DA7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-895l_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12b10","matchCriteriaId":"CBB7A220-2C3E-45B4-BA2E-D6C595B391D7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-895l:-:*:*:*:*:*:*:*","matchCriteriaId":"0B9EBC5D-43DE-4B26-8272-5A9AD2ECE2E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-895r_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12b10","matchCriteriaId":"1E4B2469-DDAB-4FD1-A446-B304AAF78BB3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-895r:-:*:*:*:*:*:*:*","matchCriteriaId":"DF2DADDD-2F1C-458D-B3F5-07EE0FE35E92"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dir-818lx_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"072F053E-4DAB-4246-BEE7-F4813957BF56"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dir-818lx:-:*:*:*:*:*:*:*","matchCriteriaId":"1B6E718C-2E2A-4E9B-A83D-25C01F681301"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/156054/D-Link-DIR-859-Unauthenticated-Remote-Command-Execution.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.dlink.com/en/security-bulletin","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://packetstormsecurity.com/files/156054/D-Link-DIR-859-Unauthenticated-Remote-Command-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.dlink.com/en/security-bulletin","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-17621","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}]}