PT-2019-1619 · D Link · D-Link Dir-878

Published 2019-02-12 · Updated 2021-04-23 · CVE-2019-8315

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1

Description The issue allows a remote attacker to execute arbitrary code and gain a root shell through a Command Injection vulnerability. This occurs when the twsystem function is called with untrusted input from the request body for the SetIPv4FirewallSettings API function, potentially via a crafted /HNAP1 POST request. The vulnerability is related to insufficient input validation, which can be exploited by including shell metacharacters in the SrcIPv4AddressRangeStart field.

Recommendations For D-Link DIR-878 version 1.12A1, consider disabling the SetIPv4FirewallSettings API function or restricting access to it until a patch is available. Additionally, avoid using the SrcIPv4AddressRangeStart field in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2019-01166

CVE-2019-8315

Affected Products

D-Link Dir-878

References · 4

• 🔥❌ https://github.com/lieanu/vuls/blob/master/dlink/DIR-878/firewallv4.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2019-8315 · Security Note
• https://bdu.fstec.ru/vul/2019-01166 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8315 · Vendor Advisory