PT-2018-3061 · D Link · D-Link Central Wifi Manager Cwm

Publicado 2018-11-20 · Atualizado 2019-07-09 · CVE-2019-13375

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link Central WiFi Manager CWM(100) versions prior to v1.03R0100 BETA6

Description A SQL Injection issue was discovered in the PayAction.class.php file, specifically with the passcode parameter in the "index.php/Pay/passcodeAuth" endpoint. This issue does not require authentication to exploit. The vulnerability is related to a lack of protection for the SQL query structure, which could allow a remote attacker to execute arbitrary code.

Recommendations For versions prior to v1.03R0100 BETA6, consider disabling the passcodeAuth functionality in the PayAction.class.php file until a patch is available. Restrict access to the "index.php/Pay/passcodeAuth" endpoint to minimize the risk of exploitation. Avoid using the passcode parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2019-03550

CVE-2019-13375

Produtos afetados

D-Link Central Wifi Manager Cwm

Referências · 10

• 🔥 https://github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-(CWM-100)-Multiple-Vulnerabilities.md · Exploit
• 🔥 https://unh3x.github.io/2019/02/21/D-link-(CWM-100)-Multiple-Vulnerabilities · Exploit
• https://github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-%28CWM-100%29-Multiple-Vulnerabilities.md · Nota
• https://bdu.fstec.ru/vul/2019-03550 · Nota de Segurança
• https://unh3x.github.io/2019/02/21/D-link-%28CWM-100%29-Multiple-Vulnerabilities · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13375 · Nota de Segurança
• https://t.me/cvenotify/288 · Publicação no Telegram
• https://cxsecurity.com/cveshow/CVE-2019-13375 · Nota
• https://osv.dev/vulnerability/CVE-2019-13375 · Aviso do Fabricante
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117 · Aviso do Fabricante