PT-2018-3061 · D Link · D-Link Central Wifi Manager Cwm
Published
2018-11-20
·
Updated
2019-07-09
·
CVE-2019-13375
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
D-Link Central WiFi Manager CWM(100) versions prior to v1.03R0100 BETA6
Description
A SQL Injection issue was discovered in the PayAction.class.php file, specifically with the
passcode parameter in the "index.php/Pay/passcodeAuth" endpoint. This issue does not require authentication to exploit. The vulnerability is related to a lack of protection for the SQL query structure, which could allow a remote attacker to execute arbitrary code.Recommendations
For versions prior to v1.03R0100 BETA6, consider disabling the
passcodeAuth functionality in the PayAction.class.php file until a patch is available. Restrict access to the "index.php/Pay/passcodeAuth" endpoint to minimize the risk of exploitation. Avoid using the passcode parameter in the affected endpoint until the issue is resolved.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
D-Link Central Wifi Manager Cwm