PT-2019-2543 · D Link · Dwr-512+7

Published 2019-04-11 · Updated 2023-04-26 · CVE-2018-19300

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DAP-1530 version 1.06b01 and earlier D-Link DAP-1610 version 1.06b01 and earlier D-Link DWR-111 version 1.02v02 and earlier D-Link DWR-116 version 1.06b03 and earlier D-Link DWR-512 version 2.02b01 and earlier D-Link DWR-711 versions prior to 1.11 D-Link DWR-712 version 2.04b01 and earlier D-Link DWR-921 version 1.02b01 and earlier D-Link DWR-921 version 2.03b01 and earlier

Description The issue exists due to insufficient input validation in the EXCU SHELL component of D-Link router firmware. By sending a GET request with specially crafted headers to the "/EXCU SHELL" URI, an attacker could execute arbitrary shell commands in the root context on the affected device. This could allow a remote attacker to execute commands on the vulnerable device as the root user.

Recommendations For D-Link DAP-1530, update to firmware version 1.06b01 or later. For D-Link DAP-1610, update to firmware version 1.06b01 or later. For D-Link DWR-111, update to firmware version 1.02v02 or later. For D-Link DWR-116, update to firmware version 1.06b03 or later. For D-Link DWR-512, update to firmware version 2.02b01 or later. For D-Link DWR-711, update to a version later than 1.11. For D-Link DWR-712, update to firmware version 2.04b01 or later. For D-Link DWR-921 (A1), update to firmware version 1.02b01 or later. For D-Link DWR-921 (B1), update to firmware version 2.03b01 or later. As a temporary workaround, consider restricting access to the /EXCU SHELL URI until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-02388

CVE-2018-19300

Affected Products

Dap-1530

Dap-1610

Dwr-111

Dwr-116

Dwr-512

Dwr-711

Dwr-712

Dwr-921

References · 8

• 🔥 https://community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers/1772 · Exploit
• https://eu.dlink.com/de/de/support/support-news/2019/march/19/remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19300 · Security Note
• https://bdu.fstec.ru/vul/2019-02388 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19300 · Vendor Advisory
• https://cxsecurity.com/cveshow/CVE-2018-19300 · Note
• https://greenbone.net/schwerwiegende-sicherheitsluecke-in-d-link-routern-entdeckt · Note
• https://greenbone.net/en/serious-vulnerability-discovered-in-d-link-routers · Note