Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
D-Link 安全漏洞
Vulnerability Description
D-link DSR-250是中国友讯（D-link）公司的一款统一服务路由器。 D-Link DSR-250 3.17 存在安全漏洞，该漏洞源于配置文件校验和验证不足可能会导致远程身份验证攻击者可利用该漏洞在上传之前将任意crontab条目注入已保存的配置。这些条目作为根执行。
CVSS Information
N/A
Vulnerability Type
N/A