CVE-2026-11341
Full vulnerability record from the local CVENow database.
Description
A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI_value causes os command injection. The attack can be initiated remotely. The exploit has been published and may be used.
Severity
LOW
CVSS score
2.1
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-06-05 18:17:04.513000
Last modified
2026-10-26 11:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-11341",
"sourceIdentifier": "[email protected]",
"published": "2026-06-05T18:17:04.513",
"lastModified": "2026-10-26T11:10:00.157",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI_value causes os command injection. The attack can be initiated remotely. The exploit has been published and may be used."
},
{
"lang": "es",
"value": "Se ha encontrado una falla en D-Link DWR-M920 hasta la versión 1.1.50. El elemento afectado es la función sub_412DA0 del archivo /boafrm/formIMEISetup. Esta manipulación del argumento IMEI_value provoca inyección de comandos del sistema operativo. El ataque puede iniciarse de forma remota. El exploit ha sido publicado y puede ser utilizado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "D-Link",
"product": "DWR-M920",
"cpes": [
"cpe:2.3:h:d-link:dwr-m920:*:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "1.1.0",
"status": "affected"
},
{
"version": "1.1.1",
"status": "affected"
},
{
"version": "1.1.2",
"status": "affected"
},
{
"version": "1.1.3",
"status": "affected"
},
{
"version": "1.1.4",
"status": "affected"
},
{
"version": "1.1.5",
"status": "affected"
},
{
"version": "1.1.6",
"status": "affected"
},
{
"version": "1.1.7",
"status": "affected"
},
{
"version": "1.1.8",
"status": "affected"
},
{
"version": "1.1.9",
"status": "affected"
},
{
"version": "1.1.10",
"status": "affected"
},
{
"version": "1.1.11",
"status": "affected"
},
{
"version": "1.1.12",
"status": "affected"
},
{
"version": "1.1.13",
"status": "affected"
},
{
"version": "1.1.14",
"status": "affected"
},
{
"version": "1.1.15",
"status": "affected"
},
{
"version": "1.1.16",
"status": "affected"
},
{
"version": "1.1.17",
"status": "affected"
},
{
"version": "1.1.18",
"status": "affected"
},
{
"version": "1.1.19",
"status": "affected"
},
{
"version": "1.1.20",
"status": "affected"
},
{
"version": "1.1.21",
"status": "affected"
},
{
"version": "1.1.22",
"status": "affected"
},
{
"version": "1.1.23",
"status": "affected"
},
{
"version": "1.1.24",
"status": "affected"
},
{
"version": "1.1.25",
"status": "affected"
},
{
"version": "1.1.26",
"status": "affected"
},
{
"version": "1.1.27",
"status": "affected"
},
{
"version": "1.1.28",
"status": "affected"
},
{
"version": "1.1.29",
"status": "affected"
},
{
"version": "1.1.30",
"status": "affected"
},
{
"version": "1.1.31",
"status": "affected"
},
{
"version": "1.1.32",
"status": "affected"
},
{
"version": "1.1.33",
"status": "affected"
},
{
"version": "1.1.34",
"status": "affected"
},
{
"version": "1.1.35",
"status": "affected"
},
{
"version": "1.1.36",
"status": "affected"
},
{
"version": "1.1.37",
"status": "affected"
},
{
"version": "1.1.38",
"status": "affected"
},
{
"version": "1.1.39",
"status": "affected"
},
{
"version": "1.1.40",
"status": "affected"
},
{
"version": "1.1.41",
"status": "affected"
},
{
"version": "1.1.42",
"status": "affected"
},
{
"version": "1.1.43",
"status": "affected"
},
{
"version": "1.1.44",
"status": "affected"
},
{
"version": "1.1.45",
"status": "affected"
},
{
"version": "1.1.46",
"status": "affected"
},
{
"version": "1.1.47",
"status": "affected"
},
{
"version": "1.1.48",
"status": "affected"
},
{
"version": "1.1.49",
"status": "affected"
},
{
"version": "1.1.50",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 2.1,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-06-05T19:37:05.583336Z",
"id": "CVE-2026-11341",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
},
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"references": [
{
"url": "https://github.com/7u7777/Dlink/blob/DWR-M920/formIMEISetup.md",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/cve/CVE-2026-11341",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/submit/832593",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/368882",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/368882/cti",
"source": "[email protected]"
},
{
"url": "https://www.dlink.com/",
"source": "[email protected]"
}
]
}