PT-2018-3062 · D Link · D-Link Central Wifi Manager Cwm

Xiaotian.Wang · Publicado 2018-11-20 · Atualizado 2019-07-09 · CVE-2019-13373

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link Central WiFi Manager CWM(100) versions prior to v1.03R0100 BETA6

Description The issue is related to the lack of protection against SQL query structure exploitation in the /web/Public/Conn.php component. This allows a remote attacker to execute arbitrary code. The problem arises because input is not validated, enabling arbitrary SQL statements to be executed in the database via the dbSQL parameter in the /web/Public/Conn.php endpoint.

Recommendations For versions prior to v1.03R0100 BETA6, update to version v1.03R0100 BETA6 or later to resolve the issue. As a temporary workaround, consider restricting access to the /web/Public/Conn.php endpoint to minimize the risk of exploitation. Avoid using the dbSQL parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2019-03551

CVE-2019-13373

Produtos afetados

D-Link Central Wifi Manager Cwm

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/dlink/dlink_central_wifimanager_sqli.rb · Exploit
• 🔥 https://github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-(CWM-100)-Multiple-Vulnerabilities.md · Exploit
• 🔥 https://unh3x.github.io/2019/02/21/D-link-(CWM-100)-Multiple-Vulnerabilities · Exploit
• https://github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-%28CWM-100%29-Multiple-Vulnerabilities.md · Nota
• https://bdu.fstec.ru/vul/2019-03551 · Nota de Segurança
• https://cxsecurity.com/cveshow/CVE-2019-13373 · Nota
• https://unh3x.github.io/2019/02/21/D-link-%28CWM-100%29-Multiple-Vulnerabilities · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13373 · Nota de Segurança
• https://t.me/cvenotify/286 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-13373 · Aviso do Fabricante
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117 · Aviso do Fabricante