PT-2009-2444 · Dd-Wrt · Dd-Wrt

Gat3Way · Publicado 2009-08-14 · Atualizado 2017-09-29 · CVE-2008-6975

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: DD-WRT version 24 sp2

Description: The issue is related to multiple cross-site request forgery (CSRF) vulnerabilities in the apply.cgi component. These vulnerabilities allow remote attackers to hijack the authentication of administrators for various requests, including executing arbitrary commands via the ping ip parameter, changing administrative credentials via the http username and http passwd parameters, enabling remote administration via the remote management parameter, and configuring port forwarding via certain from, to, ip, and pro parameters. This issue exists due to a weak anti-CSRF fix implemented in version 24 sp2.

Recommendations: For DD-WRT version 24 sp2, consider disabling the apply.cgi component or restricting access to it until a proper fix is available. As a temporary workaround, avoid using the vulnerable parameters, such as ping ip, http username, http passwd, remote management, from, to, ip, and pro, in the apply.cgi component to minimize the risk of exploitation.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2008-6975

Produtos afetados

Dd-Wrt

Referências · 8

• 🔥 https://exploit-db.com/exploits/7389 · Exploit
• 🔥 http://securityfocus.com/archive/1/499135 · Exploit
• 🔥 http://securityfocus.com/archive/1/499024 · Exploit
• 🔥 http://dd-wrt.com/phpBB2/viewtopic.php?t=55173 · Exploit
• 🔥 https://exploit-db.com/exploits/9209 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6975 · Nota
• http://securityfocus.com/archive/1/499119 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6975 · Nota de Segurança