Vulnerability · CVE-2019-19597
D-Link dap-1860_firmware Incorrect Authorization
Published Apr 12, 2021 · catalog updated Apr 12, 2021 · D-Link dap-1860_firmware
- Severity
- Unknown—
- Known exploitation
- CISA KEV and VulnCheck KEV
- EPSS
- 20.8%
- Remediation
- Remediation guidance
- Affected products
- vendor D-Link dap-1860_firmware
D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.
Technical analysis
Mechanism and impact are interpreted from ingested advisories — not independent exploit research.
CWE classification
No CWE identifiers stored yet.
Prerequisites and impact
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
How to fix CVE-2019-19597
Recommended remediation
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Official advisories
What to do
Three reads of the same public record: the decision, the versions on file, and the signals. Confirm the vendor advisory before you patch. This page does not publish exploit steps.
Executive
Treat this as an active risk. CVE-2019-19597 is a unscored issue in D-Link dap-1860_firmware (Unscored severity). CISA lists it as known exploited since Apr 12, 2021. Next step: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
System administrator
Check whether D-Link dap-1860_firmware is installed. Ranges on record: D-Link dap-1860_firmware. Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Security analyst
Unscored severity. EPSS 20.8%. CISA lists it as known exploited since Apr 12, 2021. Weaknesses: not classified. Sources: cve_org, epss, vulncheck_kev. Exploit links, when listed below, point at the original publisher.
Related intelligence
Exploitation evidence
Confirmed in CISA KEV since Apr 12, 2021. Listed in CISA KEV and VulnCheck KEV.
Safe detection guidance
Compare installed versions with the affected ranges below and verify the advisory from the original publisher. This site stores metadata and outbound links only; it does not ship exploit code or proof-of-concept payloads.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 12, 2021 · VulnCheck KEV
Detected
D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.
Apr 12, 2021 · CISA KEV
Known exploited
Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Affected versions
Enter an installed version to get a verified affected / not-affected result against the ranges below.
- vendor D-Link dap-1860_firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2019-19597
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2019-19597
30-day exploitation probability 20.8%
first.org - VulnCheck KEVConfirmed exploitationCVE-2019-19597
D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.
vulncheck.com
References
Freshness
Last verified in this catalog Oct 18, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.