A weakness in D-Link DIR-505 1.10B02, specifically the main function of the /secmark1524.cgi CGI script, allows attackers to manipulate the arguments accu/pass/code/hash/cmds and gain a backdoor into the device. This flaw enables remote attackers to execute arbitrary commands without authorization, effectively compromising the router and potentially providing full system control. The vulnerability is listed with a CVSS score of 9.3, indicating a critical threat level and the description confirms that exploitation is possible over the network and that public exploit code is available.

The affected product is D-Link DIR-505 routers running firmware version 1.10B02. No other versions or models are explicitly listed in the CVE data, so the scope is limited to this firmware build of the DIR-505 series.

The vulnerability carries a high severity score of 9.3 but lacks an EPSS value, suggesting no current public data on exploit frequency. It is not listed in the CISA KEV catalog, so no known widespread attacks are reported yet. However, the backdoor is publicly available and the exploitation vector is remote via the web interface, making any unpatched device an attractive target for attackers looking to gain remote command execution.