PT-2019-4007 · D Link · D-Link Dba-1510P

Goroh_Kun + 1 · Publicado 2019-10-04 · Atualizado 2020-01-07 · CVE-2019-6014

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DBA-1510P versions 1.70b009 and earlier

Description The issue is related to the lack of measures to neutralize special elements used in operating system commands, which can be exploited by a remote attacker to execute arbitrary commands via the Web User Interface.

Recommendations For D-Link DBA-1510P versions 1.70b009 and earlier, update the firmware to a version later than 1.70b009 to resolve the issue. As a temporary workaround, consider restricting access to the Web User Interface to minimize the risk of exploitation.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

BDU:2019-04538

CVE-2019-6014

Produtos afetados

D-Link Dba-1510P

Referências · 10

• https://bdu.fstec.ru/vul/2019-04538 · Nota de Segurança
• https://dlink-jp.com/product/dba-1510p#product_firmware · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/168501 · Nota
• https://dlink-jp.com · Nota
• https://osv.dev/vulnerability/CVE-2019-6014 · Aviso do Fabricante
• https://securitylab.ru/vulnerability/501590.php · Nota
• https://cybersecurity-help.cz/vdb/SB2019100705?affChecked=1 · Nota
• https://dlink-jp.com/release/26991 · Nota
• http://jvn.jp/en/jp/JVN95875796/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-6014 · Nota de Segurança