PT-2019-3097 · D Link · D-Link Dir-825Ac G1

Published 2019-08-27 · Updated 2023-04-27 · CVE-2019-13264

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-link DIR-825AC G1

Description The issue arises from insufficient compartmentalization between a host network and a guest network established by the same device. An attacker can exploit this by joining and then leaving an IGMP group, causing the router to create an IGMP Membership Query packet with the Group IP and send it to both the host and guest networks. The data is transferred within the Group IP field, which is completely controlled by the sender. This is also related to insufficient input validation in the device's firmware.

Recommendations For D-link DIR-825AC G1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Privilege Management

Weakness Enumeration

CWE-20

CWE-269

Related Identifiers

BDU:2019-03080

CVE-2019-13264

Affected Products

D-Link Dir-825Ac G1

References · 5

• 🔥 https://orenlab.sise.bgu.ac.il/publications/CrossRouter · Exploit
• https://bdu.fstec.ru/vul/2019-03080 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-13264 · Security Note
• https://usenix.org/system/files/woot19-paper_ovadia.pdf · Note
• https://cxsecurity.com/cveshow/CVE-2019-13264 · Note