PT-2010-1630 · D Link · D-Link Dir-615

Published 2010-04-27 · Updated 2010-04-28 · CVE-2009-4821

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 version 3.10NA

Description The issue allows remote attackers to change the admin password via the admin password parameter, disable the security requirement for the Wi-Fi network, or modify DNS settings. This is possible because the D-Link DIR-615 with the specified firmware does not require administrative authentication for the "apply.cgi" endpoint.

Recommendations For D-Link DIR-615 version 3.10NA, as a temporary workaround, consider restricting access to the "apply.cgi" endpoint until a patch is available. Avoid using the admin password parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2009-4821

Affected Products

D-Link Dir-615

References · 4

• 🔥 http://hiredhacker.com/2009/12/15/d-link-dir-615-remote-exploit · Exploit
• http://secunia.com/advisories/37777 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4821 · Security Note
• http://securityfocus.com/bid/37415 · Note