PT-2020-16466 · D Link · D-Link Dap-1360

Assaf Vilmovski · Published 2020-10-06 · Updated 2021-07-21 · CVE-2020-26582

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DAP-1360U versions prior to 3.0.1

Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping, specifically through the res config action=3&res config id=18 parameter.

Recommendations For D-Link DAP-1360U versions prior to 3.0.1, update to version 3.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ping functionality with res config action=3&res config id=18 until a patch is applied.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-20

CWE-78

Related Identifiers

BDU:2021-00106

CVE-2020-26582

Affected Products

D-Link Dap-1360

References · 20

• 🔥 https://wilomousky.blogspot.com/2020/10/dap-1360u-cmdi.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-26582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26582 · Security Note
• https://ubuntu.com/security/CVE-2020-25643 · Vendor Advisory
• https://debian.org/security/2020/dsa-4774 · Vendor Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10191 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00106 · Security Note
• https://access.redhat.com/security/cve/cve-2020-25643 · Note
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105 · Note
• https://t.me/cibsecurity/15090 · Telegram Post
• https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html · Note
• https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html · Note
• https://suse.com/security/cve/CVE-2020-25643 · Note
• https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html · Note