CVE-2020-6841

Publication date

2020-02-21 15:35:04

Family

mitre

State

PUBLISHED

Description

D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php userName parameter.