PT-2009-2444 · Dd-Wrt · Dd-Wrt

Gat3Way · Published 2009-08-14 · Updated 2017-09-29 · CVE-2008-6975

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: DD-WRT version 24 sp2

Description: The issue is related to multiple cross-site request forgery (CSRF) vulnerabilities in the apply.cgi component. These vulnerabilities allow remote attackers to hijack the authentication of administrators for various requests, including executing arbitrary commands via the ping ip parameter, changing administrative credentials via the http username and http passwd parameters, enabling remote administration via the remote management parameter, and configuring port forwarding via certain from, to, ip, and pro parameters. This issue exists due to a weak anti-CSRF fix implemented in version 24 sp2.

Recommendations: For DD-WRT version 24 sp2, consider disabling the apply.cgi component or restricting access to it until a proper fix is available. As a temporary workaround, avoid using the vulnerable parameters, such as ping ip, http username, http passwd, remote management, from, to, ip, and pro, in the apply.cgi component to minimize the risk of exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2008-6975

Affected Products

Dd-Wrt

References · 8

• 🔥 https://exploit-db.com/exploits/7389 · Exploit
• 🔥 http://securityfocus.com/archive/1/499135 · Exploit
• 🔥 http://securityfocus.com/archive/1/499024 · Exploit
• 🔥 http://dd-wrt.com/phpBB2/viewtopic.php?t=55173 · Exploit
• 🔥 https://exploit-db.com/exploits/9209 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6975 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6975 · Note
• http://securityfocus.com/archive/1/499119 · Note