CVE-2021-28144
prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely.
Date published : 2021-03-11
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10208