CVE-2018-6530

Published: Mar 6, 2018Updated: Nov 7, 2025 Sources: CVE List NVD BDUCWE-78

NVD MITRE

9.8CVSSCRITICAL

EPSS Score

Am I actually vulnerable?1 Nuclei template available — see how to check your systems. How to verify

Description

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.

CVSS Vector Breakdown

Exploitability

AV:NAttack Vector

Network

AC:LAttack Complexity

Low

PR:NPrivileges Required

None

UI:NUser Interaction

None

Scope

S:UScope

Unchanged

Impact

C:HConfidentiality

High

I:HIntegrity

High

A:HAvailability

High

Open in CVSS calculator →

Weaknesses

CWE-78

Affected Products

n/a n/a

DIR-868L D-Link Corp.Networking Infrastructure

DIR-865L D-Link Corp.Networking Infrastructure

DIR-880L D-Link Corp.Networking Infrastructure

DIR-860L D-Link Corp.Networking Infrastructure

d-link corp.commercialTWNetworking Infrastructureaka d-link corporation, d-link international

and 4 more affected products View all →

Attack Graph

Products CVE Techniques Tactics

Click technique nodes to view MITRE ATT&CK details. Scroll to zoom, drag to pan.

Exploitability

CISA Known Exploited Vulnerability

Added to KEV:Sep 8, 2022

Remediation due:Sep 29, 2022

Ransomware:Known ransomware use

Required action: The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.

Official Patch Available