PT-2019-1116 · D Link · D-Link Dir-860L+1

Pr0V3Rbs · Publicado 2019-01-02 · Atualizado 2021-04-23 · CVE-2018-20114

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: D-Link DIR-818LW Rev.A version 2.05.B03 D-Link DIR-860L Rev.B version 2.03.B03

Description: The issue allows for unauthenticated remote OS command execution in the soap.cgi service of the cgibin binary. This can be achieved via an "&&" substring in the service parameter. The problem arises due to incomplete privilege management in the soapcgi main function of the soap.cgi script, located at /htdocs/cgibin/soap.cgi, which can enable a remote attacker to execute arbitrary OS commands.

Recommendations: For D-Link DIR-818LW Rev.A version 2.05.B03, consider disabling the soap.cgi service until a patch is available. For D-Link DIR-860L Rev.B version 2.03.B03, restrict access to the cgibin binary to minimize the risk of exploitation. Avoid using the service parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Improper Privilege Management

Enumeração de Fraquezas

CWE-78

CWE-269

Identificadores relacionados

BDU:2019-00093

CVE-2018-20114

Produtos afetados

D-Link Dir-818Lw

D-Link Dir-860L

Referências · 5

• 🔥 https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-20114 · Exploit
• https://bdu.fstec.ru/vul/2019-00093 · Nota de Segurança
• https://cxsecurity.com/cveshow/CVE-2018-20114 · Nota
• https://osv.dev/vulnerability/CVE-2018-20114 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-20114 · Nota de Segurança