CVE-2016-10178

Critical

Published: 30/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered on the D-Link DWR-932B router that allows the command '/sbin/telnetd -l /bin/sh' to be executed by HELODBG on port 39889 (UDP).

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the router's shell, posing a serious security threat to the network.

Recommendation

It is recommended to update the router's firmware to the latest version and block port 39889 to minimize risk.

Original NVD description (English source)

An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command.