PT-2019-20261 · D Link · D-Link Dir-822+5
Publicado
2019-01-07
·
Atualizado
2019-01-07
·
CVE-2018-1998620
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
D-Link DIR-822 versions Rev.B through Rev.C
D-Link DIR-860L version Rev.B
D-Link DIR-868L version Rev.B
D-Link DIR-880L version Rev.A
D-Link DIR-890L version Rev.A
D-Link DIR-818LW version Rev.A
D-Link DIR-822 version B1
Description
The issue exists due to the failure to neutralize special elements used in the operating system command. Exploitation of this issue may allow a remote attacker to execute arbitrary commands using a specially crafted XML message to the
/HNAP1 API endpoint, specifically to SetAccessPointMode, SetClientInfoDemo, or SetRouterSettings. This could impact the confidentiality, integrity, and availability of protected information.Recommendations
For D-Link DIR-822 versions Rev.B through Rev.C, update the firmware to a version that includes a fix for this issue.
For D-Link DIR-860L version Rev.B, restrict access to the
/HNAP1/SetAccessPointMode API endpoint until a patch is available.
For D-Link DIR-868L version Rev.B, consider disabling the SetClientInfoDemo function until a fix is released.
For D-Link DIR-880L version Rev.A, avoid using the SetRouterSettings API endpoint until the issue is resolved.
For D-Link DIR-890L version Rev.A, apply configuration changes to minimize the risk of exploitation.
For D-Link DIR-818LW version Rev.A, update the firmware to a version that includes a fix for this issue.
For D-Link DIR-822 version B1, restrict access to the /HNAP1/SetRouterSettings API endpoint until a patch is available.Exploit
Correção
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
D-Link Dir-818Lw
D-Link Dir-822
D-Link Dir-860L
D-Link Dir-868L
D-Link Dir-880L
D-Link Dir-890L