PT-2018-3916 · D Link · D-Link Dir-620

Published 2018-05-23 · Updated 2023-04-26 · CVE-2018-6212

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-620 versions 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, 2.0.22

Description The issue exists due to inadequate protection of the web interface structure in the D-Link DIR-620 router's firmware. This allows a remote attacker to conduct a Cross-Site Scripting (XSS) attack. The vulnerability is specifically related to the "Search" field, where missed filtration for special characters and incorrect processing of the XMLHttpRequest object can be exploited.

Recommendations For versions 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, consider disabling the "Search" field functionality until a patch is available to prevent exploitation of the XSS vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2023-03072

CVE-2018-6212

Affected Products

D-Link Dir-620

References · 7

• 🔥 https://securelist.com/backdoors-in-d-links-backyard/85530 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-6212 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6212 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03072 · Security Note
• https://securityaffairs.co/wordpress/72839/hacking/d-link-dir-620-flaws.html · Note
• https://bleepingcomputer.com/news/security/backdoor-account-found-in-d-link-dir-620-routers · Note
• http://securitynewspaper.com/2018/05/25/d-link-dir-620-routers-critical-vulnerabilities · Note