PT-2019-3096 · D Link · D-Link Dir-825Ac G1

Published 2019-08-27 · Updated 2023-04-27 · CVE-2019-13265

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-link DIR-825AC G1 versions (affected versions not specified)

Description The issue is related to insufficient compartmentalization between a host network and a guest network established by the same device. These devices forward ARP requests between the host and the guest networks, which can be used as a direct covert channel. An attacker can exploit this by sending an ARP request to an arbitrary computer on the network. The exploitation depends on the router's restriction of ARP forwarding, which in this case is not restricted.

Recommendations For D-link DIR-825AC G1 devices, consider restricting ARP forwarding to requests destined for the network's subnet mask as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Privilege Management

Weakness Enumeration

CWE-20

CWE-269

Related Identifiers

BDU:2019-03079

CVE-2019-13265

Affected Products

D-Link Dir-825Ac G1

References · 5

• 🔥 https://orenlab.sise.bgu.ac.il/publications/CrossRouter · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-13265 · Security Note
• https://bdu.fstec.ru/vul/2019-03079 · Security Note
• https://usenix.org/system/files/woot19-paper_ovadia.pdf · Note
• https://cxsecurity.com/cveshow/CVE-2019-13265 · Note