PT-2013-5759 · D Link · D-Link Dsl-2740B Gateway

Ivano Binetti · Published 2013-11-19 · Updated 2017-04-29 · CVE-2013-5730

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions D-Link DSL-2740B Gateway version EU 1.00

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests. The affected requests include enabling or disabling Wireless MAC Address Filters via a wlFltMode action to "wlmacflt.cmd", enabling or disabling firewall protections via a request to "scdmz.cmd", and enabling or disabling remote management via a save action to "scsrvcntr.cmd".

Recommendations For D-Link DSL-2740B Gateway version EU 1.00, consider disabling the wlmacflt.cmd, scdmz.cmd, and scsrvcntr.cmd commands until a patch is available to prevent exploitation of the CSRF vulnerabilities. Restrict access to these commands to minimize the risk of unauthorized changes to Wireless MAC Address Filters, firewall protections, and remote management settings. Avoid using the wlFltMode and save actions in the affected API endpoints until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2013-5730

Affected Products

D-Link Dsl-2740B Gateway

References · 6

• 🔥 http://webapp-security.com/wp-content/uploads/2013/09/D-Link-DSL-2740B-Multiple-CSRF-Vulnerabilities1.txt · Exploit
• 🔥 https://exploit-db.com/exploits/28239 · Exploit
• 🔥 http://packetstormsecurity.com/files/123200/D-Link-DSL-2740B-Cross-Site-Request-Forgery.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5730 · Security Note
• http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10004 · Vendor Advisory
• http://webapp-security.com/2013/09/d-link-dsl-2740b-multiple-csrf-vulnerabilities · Note