D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.Referenceshttps://www.dlink.com/en/security-bulletin/https://github.com/14isnot40/vul_discovery/blob/master/D-Link%20COVR%2012xx%20.pdf