PT-2009-2443 · New Media Net Gmbh · Dd-Wrt

Gat3Way · Publicado 2009-08-14 · Atualizado 2017-09-29 · CVE-2008-6974

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: DD-WRT versions 24 sp1 and earlier

Description: The issue allows remote attackers to hijack the authentication of administrators for various requests, including executing arbitrary commands via the ping ip parameter, changing administrative credentials via the http username and http passwd parameters, enabling remote administration via the remote management parameter, and configuring port forwarding via certain from, to, ip, and pro parameters.

Recommendations: For DD-WRT versions 24 sp1 and earlier, consider disabling the apply.cgi module until a patch is available to prevent exploitation of the CSRF vulnerabilities. Restrict access to the administrative interface to minimize the risk of unauthorized changes. Avoid using the vulnerable parameters, such as ping ip, http username, http passwd, remote management, from, to, ip, and pro, in the affected API endpoint until the issue is resolved.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2008-6974

Produtos afetados

Dd-Wrt

Referências · 9

• 🔥 https://exploit-db.com/exploits/7389 · Exploit
• 🔥 http://dd-wrt.com/phpBB2/viewtopic.php?t=55173 · Exploit
• 🔥 https://exploit-db.com/exploits/9209 · Exploit
• http://securityfocus.com/archive/1/499135 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6974 · Nota de Segurança
• http://securityfocus.com/archive/1/499119 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6974 · Nota
• http://securityfocus.com/archive/1/499132 · Nota
• http://securityfocus.com/archive/1/499024 · Nota