PT-2019-7020 · D Link · D-Link Dir-645+4

Juan Vazquez + 1 · Published 2019-06-11 · Updated 2025-01-07 · CVE-2013-7471

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions D-Link DIR-845 versions prior to 1.02b03 D-Link DIR-600 versions prior to 2.17b01 D-Link DIR-645 versions prior to 1.04b11 D-Link DIR-300 rev. B D-Link DIR-865

Description An issue was discovered in "soap.cgi?service=WANIPConn1" where Command Injection via shell metacharacters is possible in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request.

Recommendations For D-Link DIR-845 versions prior to 1.02b03, update to version 1.02b03 or later. For D-Link DIR-600 versions prior to 2.17b01, update to version 2.17b01 or later. For D-Link DIR-645 versions prior to 1.04b11, update to version 1.04b11 or later. For D-Link DIR-300 rev. B and DIR-865, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the "soap.cgi?service=WANIPConn1" endpoint to minimize the risk of exploitation. Avoid using the NewInternalClient, NewExternalPort, or NewInternalPort elements in the affected SOAP POST request until the issue is resolved.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2013-7471

Affected Products

D-Link Dir-300

D-Link Dir-600

D-Link Dir-645

D-Link Dir-845L

D-Link Dir-865L

References · 7

• 🔥 https://exploit-db.com/exploits/27044 · Exploit
• 🔥 http://s3cur1ty.de/m1adv2013-020 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-7471 · Security Note
• https://t.me/aptreports/8437 · Telegram Post
• https://t.me/aptreports/8440 · Telegram Post
• https://t.me/cibsecurity/4850 · Telegram Post
• https://t.me/aptreports/15229 · Telegram Post