PT-2018-3802 · D Link · D-Link Dir-850L

Tuomo Untinen · Published 2018-08-20 · Updated 2022-06-28 · CVE-2018-18907

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-850L version 1.21WW

Description An issue was discovered where a partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption. The vulnerability is related to an incorrectly implemented authentication mechanism in the WPA algorithm of the D-Link DIR-850L firmware. Exploitation of the vulnerability may allow an attacker to bypass security restrictions by sending specially crafted packets.

Recommendations For D-Link DIR-850L version 1.21WW, consider disabling WPA authentication temporarily until a patch is available. Restrict access to the wireless network to minimize the risk of exploitation. Avoid using unencrypted Data Frames in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2022-04099

CVE-2018-18907

Affected Products

D-Link Dir-850L

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2018-18907 · Security Note
• https://bdu.fstec.ru/vul/2022-04099 · Security Note
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10097 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-18907 · Vendor Advisory
• http://us.dlink.com/security-advisories · Note
• https://kyberturvallisuuskeskus.fi/en/authentication-bypass-d-link-dir-850l · Note
• https://t.me/cibsecurity/44704 · Telegram Post
• https://synopsys.com/blogs/software-security/wpa2-encryption-bypass-defensics-fuzzing · Note
• https://support.dlink.ca/ProductInfo.aspx?m=DIR-850L · Note