PT-2018-3878 · D Link · D-Link Dir-823G

Hac425 · Published 2018-10-02 · Updated 2023-04-26 · CVE-2018-17786

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G devices (affected versions not specified)

Description The issue is related to the lack of authentication in certain components of the D-Link DIR-823G device's firmware, specifically ExportSettings.sh, upload settings.cgi, GetDownLoadSyslog.sh, and upload firmware.cgi. This allows remote attackers to execute arbitrary code. The vulnerability is associated with the possibility of bypassing authentication, which can enable a remote attacker to perform unauthorized actions.

Recommendations For D-Link DIR-823G devices, consider disabling the ExportSettings.sh, upload settings.cgi, GetDownLoadSyslog.sh, and upload firmware.cgi components until a patch is available to prevent remote attackers from executing arbitrary code. Restrict access to these components to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2023-02767

CVE-2018-17786

Affected Products

D-Link Dir-823G

References · 3

• 🔥 https://xz.aliyun.com/t/2834 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-17786 · Security Note
• https://bdu.fstec.ru/vul/2023-02767 · Security Note