PT-2018-18960 · D Link · D-Link Dir-868L

Tony Loi · Published 2018-04-04 · Updated 2023-11-08 · CVE-2018-9284

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-868L devices with Singapore StarHub firmware versions prior to v1.21SHCb03

Description The issue allows remote attackers to execute arbitrary code on the affected devices. This is related to the authentication.cgi component.

Recommendations For D-Link DIR-868L devices with Singapore StarHub firmware versions prior to v1.21SHCb03, update to version v1.21SHCb03 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-9284

Affected Products

D-Link Dir-868L

References · 4

• https://fortinet.com/blog/threat-research/fortiguard-labs-discovers-vulnerability-in--d-link-router-dir868.html · Patch
• http://dlink.com.sg/dir-868l/#firmware · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-9284 · Security Note
• https://osv.dev/vulnerability/CVE-2018-9284 · Vendor Advisory