PT-2019-4007 · D Link · D-Link Dba-1510P

Goroh_Kun + 1 · Published 2019-10-04 · Updated 2020-01-07 · CVE-2019-6014

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DBA-1510P versions 1.70b009 and earlier

Description The issue is related to the lack of measures to neutralize special elements used in operating system commands, which can be exploited by a remote attacker to execute arbitrary commands via the Web User Interface.

Recommendations For D-Link DBA-1510P versions 1.70b009 and earlier, update the firmware to a version later than 1.70b009 to resolve the issue. As a temporary workaround, consider restricting access to the Web User Interface to minimize the risk of exploitation.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2019-04538

CVE-2019-6014

Affected Products

D-Link Dba-1510P

References · 10

• https://bdu.fstec.ru/vul/2019-04538 · Security Note
• https://dlink-jp.com/product/dba-1510p#product_firmware · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6014 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/168501 · Note
• https://dlink-jp.com · Note
• https://securitylab.ru/vulnerability/501590.php · Note
• https://cybersecurity-help.cz/vdb/SB2019100705?affChecked=1 · Note
• https://dlink-jp.com/release/26991 · Note
• http://jvn.jp/en/jp/JVN95875796/index.html · Note