PT-2020-2771 · Trendnet+1 · Trendnet Tew-632Brp+1

Published 2020-03-06 · Updated 2020-03-09 · CVE-2020-10213

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-825 Rev.B version 2.10 TRENDnet TEW-632BRP version 1.010B32

Description An issue exists that allows remote attackers to execute arbitrary commands via the wps sta enrollee pin parameter in a "set sta enrollee pin.cgi" POST request. The vulnerability is due to the lack of measures to neutralize special elements used in the operating system command. This can be exploited by a remote attacker to execute arbitrary commands.

Recommendations For D-Link DIR-825 Rev.B version 2.10, consider disabling the set sta enrollee pin.cgi function until a patch is available. For TRENDnet TEW-632BRP version 1.010B32, restrict access to the set sta enrollee pin.cgi module to minimize the risk of exploitation. Avoid using the wps sta enrollee pin parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2020-02863

CVE-2020-10213

Affected Products

D-Link Dir-825

Trendnet Tew-632Brp

References · 6

• 🔥 https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability3.md · Exploit
• https://osv.dev/vulnerability/CVE-2020-10213 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10213 · Security Note
• https://bdu.fstec.ru/vul/2020-02863 · Security Note
• https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf · Note
• https://vuldb.com/?id.150977 · Note