PT-2019-2027 · D Link · Dir-817Lw+3

Published 2019-03-25 · Updated 2021-04-23 · CVE-2019-7642

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-817LW versions A1-1.04 D-Link DIR-816L versions B1-2.06 D-Link DIR-816 versions B1-2.06 D-Link DIR-850L versions A1-1.09 D-Link DIR-868L versions A1-1.10

Description The mydlink feature in D-Link routers has a vulnerability related to insufficient authentication requirements in some web interfaces. This allows an attacker to remotely obtain users' DNS query logs and login logs by sending a specially crafted HTTP request.

Recommendations For DIR-817LW version A1-1.04, restrict access to the vulnerable mydlink web interface until a patch is available. For DIR-816L version B1-2.06, consider disabling the mydlink feature to prevent exploitation. For DIR-816 version B1-2.06, avoid using the mydlink web interface for sensitive operations until the issue is resolved. For DIR-850L version A1-1.09, limit access to the mydlink web interface to minimize the risk of exploitation. For DIR-868L version A1-1.10, as a temporary workaround, consider restricting the use of the mydlink feature until a fix is provided.

Exploit

Fix

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

BDU:2019-01740

CVE-2019-7642

Affected Products

Dir-816

Dir-817Lw

Dir-850L

Dir-868L

References · 5

• 🔥 https://github.com/xw77cve/CVE-2019-7642 · Exploit
• 🔥 https://github.com/xw77cve/CVE-2019-7642/blob/master/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7642 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7642 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01740 · Security Note