PT-2017-17712 · D Link · D-Link Dir-615

Publicado 2017-07-07 · Atualizado 2021-04-23 · CVE-2017-7404

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions prior to 20.12PTb04

Description The issue allows an attacker to send requests to the victim's router without knowing the credentials, due to a CSRF vulnerability. If a victim logs in to the router's web interface and visits a malicious site from another browser tab, the malicious site can send a POST request to "Form2File.htm" to upload firmware to the victim's router. This can cause the router to reboot or crash, resulting in a Denial of Service. An attacker may also succeed in uploading malicious firmware.

Recommendations For D-Link DIR-615 versions prior to 20.12PTb04, update to version 20.12PTb04 or later to resolve the issue. As a temporary workaround, consider restricting access to the "Form2File.htm" endpoint to minimize the risk of exploitation. Avoid using the router's web interface while browsing other sites to reduce the risk of CSRF attacks.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-7404

Produtos afetados

D-Link Dir-615

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-7404 · Aviso do Fabricante
• https://qualys.com/2017/03/12/qsa-2017-03-12/qsa-2017-03-12.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7404 · Nota de Segurança
• ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_FIRMWARE_PATCH_v20.12PTb04.zip · Aviso do Fabricante