PT-2020-6764 · D Link · D-Link Dir-823G

Published 2020-09-14 · Updated 2021-11-05 · CVE-2020-25367

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05

Description A command injection vulnerability was discovered in the HNAP1 protocol. An attacker can execute arbitrary web scripts via shell metacharacters in the Captcha field to Login. This issue is related to insufficient argument checking in the protocol implementation, allowing a remote attacker to execute arbitrary commands by introducing specially crafted metacharacters.

Recommendations For D-Link DIR-823G version V1.0.2B05, consider disabling the Captcha field for Login until a patch is available to prevent exploitation. Restrict access to the HNAP1 protocol to minimize the risk of command injection attacks. Avoid using the Captcha field in the Login process until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-06129

CVE-2020-25367

Affected Products

D-Link Dir-823G

References · 8

• 🔥 https://github.com/sek1th/iot/blob/master/dir823g_3.md · Exploit
• https://bdu.fstec.ru/vul/2022-06129 · Security Note
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25367 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25367 · Vendor Advisory
• https://t.me/cibsecurity/31801 · Telegram Post
• http://d-link.com · Note
• https://t.me/cvenotify/22955 · Telegram Post