PT-2019-13424 · D Link · Dir-655

Publicado 2019-07-11 · Atualizado 2021-04-23 · CVE-2019-13563

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-655 C devices before version 3.02B05 BETA03

Description The issue allows for Cross-Site Request Forgery (CSRF) attacks on the entire management console. This means an attacker could potentially trick a user into performing unintended actions on the device.

Recommendations For versions prior to 3.02B05 BETA03, update to version 3.02B05 BETA03 or later to resolve the issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-13563

Produtos afetados

Dir-655

Referências · 5

• 🔥 https://nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce · Exploit
• https://osv.dev/vulnerability/CVE-2019-13563 · Aviso do Fabricante
• ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13563 · Nota de Segurança
• https://nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/csrf.txt · Nota