PT-2019-2027 · D Link · Dir-817Lw+3

Publicado 2019-03-25 · Atualizado 2021-04-23 · CVE-2019-7642

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-817LW versions A1-1.04 D-Link DIR-816L versions B1-2.06 D-Link DIR-816 versions B1-2.06 D-Link DIR-850L versions A1-1.09 D-Link DIR-868L versions A1-1.10

Description The mydlink feature in D-Link routers has a vulnerability related to insufficient authentication requirements in some web interfaces. This allows an attacker to remotely obtain users' DNS query logs and login logs by sending a specially crafted HTTP request.

Recommendations For DIR-817LW version A1-1.04, restrict access to the vulnerable mydlink web interface until a patch is available. For DIR-816L version B1-2.06, consider disabling the mydlink feature to prevent exploitation. For DIR-816 version B1-2.06, avoid using the mydlink web interface for sensitive operations until the issue is resolved. For DIR-850L version A1-1.09, limit access to the mydlink web interface to minimize the risk of exploitation. For DIR-868L version A1-1.10, as a temporary workaround, consider restricting the use of the mydlink feature until a fix is provided.

Exploit

Correção

Missing Authentication

Improper Authentication

Enumeração de Fraquezas

CWE-306

CWE-287

Identificadores relacionados

BDU:2019-01740

CVE-2019-7642

Produtos afetados

Dir-816

Dir-817Lw

Dir-850L

Dir-868L

Referências · 5

• 🔥 https://github.com/xw77cve/CVE-2019-7642 · Exploit
• 🔥 https://github.com/xw77cve/CVE-2019-7642/blob/master/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7642 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-7642 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01740 · Nota de Segurança