PT-2013-5759 · D Link · D-Link Dsl-2740B Gateway

Ivano Binetti · Publicado 2013-11-19 · Atualizado 2017-04-29 · CVE-2013-5730

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions D-Link DSL-2740B Gateway version EU 1.00

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests. The affected requests include enabling or disabling Wireless MAC Address Filters via a wlFltMode action to "wlmacflt.cmd", enabling or disabling firewall protections via a request to "scdmz.cmd", and enabling or disabling remote management via a save action to "scsrvcntr.cmd".

Recommendations For D-Link DSL-2740B Gateway version EU 1.00, consider disabling the wlmacflt.cmd, scdmz.cmd, and scsrvcntr.cmd commands until a patch is available to prevent exploitation of the CSRF vulnerabilities. Restrict access to these commands to minimize the risk of unauthorized changes to Wireless MAC Address Filters, firewall protections, and remote management settings. Avoid using the wlFltMode and save actions in the affected API endpoints until the issue is resolved.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2013-5730

Produtos afetados

D-Link Dsl-2740B Gateway

Referências · 6

• 🔥 http://webapp-security.com/wp-content/uploads/2013/09/D-Link-DSL-2740B-Multiple-CSRF-Vulnerabilities1.txt · Exploit
• 🔥 https://exploit-db.com/exploits/28239 · Exploit
• 🔥 http://packetstormsecurity.com/files/123200/D-Link-DSL-2740B-Cross-Site-Request-Forgery.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5730 · Nota de Segurança
• http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10004 · Aviso do Fabricante
• http://webapp-security.com/2013/09/d-link-dsl-2740b-multiple-csrf-vulnerabilities · Nota