CVE-2019-13482: D-Link Dir-818lw Firmware

High severity, CVSS 8.8. EPSS: 8.1% chance of exploitation in the next 30 days.

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings.

Affected products

• D-Link Dir-818lw Firmware: version 2.06 only

Published 2019-07-10. Last modified 2026-06-17.