PT-2020-6867 · D Link · Dch-M225

Jeremy Laidman · Published 2020-02-21 · Updated 2023-04-26 · CVE-2020-6842

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DCH-M225 versions 1.05b01 and earlier

Description The issue is related to the lack of proper sanitization of special elements used in the operating system command when processing the media renderer parameter in the name string. This allows remote authenticated administrators to execute arbitrary OS commands via shell metacharacters in the media renderer name. The exploitation of this issue can enable a remote attacker to execute arbitrary commands.

Recommendations For D-Link DCH-M225 versions 1.05b01 and earlier, as a temporary workaround, consider restricting access to the media renderer name parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-02613

CVE-2020-6842

Affected Products

Dch-M225

References · 5

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10152 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-6842 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6842 · Security Note
• https://bdu.fstec.ru/vul/2023-02613 · Security Note
• https://gist.github.com/jezzaaa/9d704400a7e23f988dfb4f73658678b8 · Note