PT-2018-3884 · D Link · D-Link Dir-816 A2

Nabla · Published 2018-09-15 · Updated 2023-04-26 · CVE-2018-17063

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10 B05

Description An issue exists in the handler function of the "/goform/NTPSyncWithHost" route, where an HTTP request parameter is used in command string construction. This could lead to command injection via shell metacharacters. The vulnerability in the NTPSyncWithHost function of the D-Link DIR-816 A2 router's firmware exists due to the lack of measures to neutralize special elements used in the operating system command. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary commands through shell metacharacters.

Recommendations For D-Link DIR-816 A2 version 1.10 B05, as a temporary workaround, consider disabling the "/goform/NTPSyncWithHost" route until a patch is available. Restrict access to this route to minimize the risk of exploitation. Avoid using parameters that could be used for command injection in the affected route until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

XSS

Weakness Enumeration

CWE-78

CWE-79

Related Identifiers

BDU:2023-02773

CVE-2018-17063

Affected Products

D-Link Dir-816 A2

References · 4

• 🔥 https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-17063 · Security Note
• https://bdu.fstec.ru/vul/2023-02773 · Security Note
• https://osv.dev/vulnerability/CVE-2018-17063 · Vendor Advisory