PT-2018-3881 · D Link · D-Link Dir-816 A2

Nabla · Published 2018-09-15 · Updated 2023-04-26 · CVE-2018-17066

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10 B05

Description An issue exists in the handler function of the "/goform/form2systime.cgi" route, where an HTTP request parameter is used in command string construction. This could lead to command injection via shell metacharacters in the datetime parameter. The vulnerability is due to the lack of neutralization of special elements used in the operating system command, which may allow a remote attacker to execute arbitrary commands through shell metacharacters in the datetime parameter.

Recommendations For D-Link DIR-816 A2 version 1.10 B05, as a temporary workaround, consider restricting access to the "/goform/form2systime.cgi" route to minimize the risk of exploitation. Avoid using the datetime parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

XSS

Weakness Enumeration

CWE-78

CWE-79

Related Identifiers

BDU:2023-02770

CVE-2018-17066

Affected Products

D-Link Dir-816 A2

References · 4

• 🔥 https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_0 · Exploit
• https://osv.dev/vulnerability/CVE-2018-17066 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17066 · Security Note
• https://bdu.fstec.ru/vul/2023-02770 · Security Note