{"cvss":0.0,"datePublished":"2021-04-12T00:00:00Z","dateUpdated":"2021-04-12T00:00:00Z","description":"/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication.","dueDate":"","id":"CVE-2019-13372","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"central_wifimanager","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"D-Link central_wifimanager Improper Control of Generation of Code","vendor":"D-Link"}