CVE-2024-7357 – D-Link DIR-600 soap.cgi soapcgi_main os command injection

https://notcve.org/view.php?id=CVE-2024-7357

01 Aug 2024 — A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgi_main of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. • https://vuldb.com/?id.273329 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •