CVE Feed

    Dashboard / CVE / CVE-2019-16057

    CVE-2019-16057

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

    Published:Sep 16, 2019
    Last Modified:Nov 6, 2025
    EPS:Sep 16, 2019
    EPSS Score:0.9375
    CVSS Score:9.8

    CISA Notification

    Description

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

    Required Action:

    The impacted product is end-of-life and should be disconnected if still in use.

    Notes:

    No extra notes provided.

    Due Date
    May 6, 2022
    1589 days ago
    Alert Date
    Apr 15, 2022
    1610 days ago

    Affected Products

    Vendor
    Dlink
    Product
    Dns-320
    Vendor
    Dlink
    Product
    Dns-320 Firmware

    Exploits

    https://blog.cystack.net/d-link-dns-320-rce/https://blog.cystack.net/d-link-dns-320-rce/

    Related CVEs

    CVE-2026-8273 (CVSS 5.1) — A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/c…
    CVE-2026-8272 (CVSS 2) — A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/mo…
    CVE-2026-8271 (CVSS 2) — A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_d…
    CVE-2026-5312 (CVSS 5.5) — A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, D…
    CVE-2026-5311 (CVSS 5.5) — A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-3…
    CVE-2026-5215 (CVSS 2.1) — A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, D…
    CVE-2026-5214 (CVSS 7.4) — A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-32…
    CVE-2026-5213 (CVSS 7.4) — A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, D…
    CVE-2026-5212 (CVSS 7.4) — A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, D…
    CVE-2026-5211 (CVSS 7.4) — A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High