Live › vulnerability › CVE-2019-17621
Go to dashboardD-Link DIR-859 routers have a command execution flaw in the UPnP service at /gena.cgi. An unauthenticated attacker on the local network can send a crafted HTTP SUBSCRIBE request and run system commands as root.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| D-Link DIR-859 Router | vendor | – | – |
| dlink dir-859 firmware | vendor | <= 1.05b03 | – |
| dlink dir-859 firmware | vendor | = 1.06b01 | – |
| dlink dir-822 firmware | vendor | <= 2.03b01 | – |
| dlink dir-822 firmware | vendor | <= 3.12b04 | – |
| dlink dir-823 firmware | vendor | <= 1.00b06 | – |
| dlink dir-823 firmware | vendor | = 1.00b06 | – |
| dlink dir-865l firmware | vendor | <= 1.07b01 | – |
| dlink dir-868l firmware | vendor | <= 1.12b04 | – |
| dlink dir-868l firmware | vendor | <= 2.05b02 | – |
| dlink dir-869 firmware | vendor | <= 1.03b02 | – |
| dlink dir-869 firmware | vendor | = 1.03b02 | – |
| dlink dir-880l firmware | vendor | <= 1.08b04 | – |
| dlink dir-890l firmware | vendor | <= 1.11b01 | – |
| dlink dir-890l firmware | vendor | = 1.11b01 | – |
| dlink dir-890r firmware | vendor | <= 1.11b01 | – |
| dlink dir-890r firmware | vendor | = 1.11b01 | – |
| dlink dir-885l firmware | vendor | <= 1.12b05 | – |
| dlink dir-885r firmware | vendor | <= 1.12b05 | – |
| dlink dir-895l firmware | vendor | <= 1.12b10 | – |
| dlink dir-895r firmware | vendor | <= 1.12b10 | – |
| dlink dir-818lx firmware | vendor | – | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
CISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2019-17621")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.