PT-2020-6869 · D Link · D-Link Dir-867-Us+2

Chung96Vn · Published 2020-07-02 · Updated 2023-04-26 · CVE-2020-15633

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-867-US, DIR-878, DIR-882-US versions 1.20B10 BETA

Description The issue is related to the implementation of the HNAP protocol in the firmware of D-Link routers, which allows an attacker to bypass authentication procedures by utilizing an alternative path or channel when handling HTTP requests that include the string ?GetCAPTCHAsetting. This can enable a remote attacker to bypass security restrictions, escalate privileges, or execute arbitrary code. The flaw exists within the handling of HNAP requests due to incorrect string matching logic when accessing protected pages.

Recommendations For D-Link DIR-867-US, DIR-878, DIR-882-US version 1.20B10 BETA, consider disabling the handling of HNAP requests or restricting access to protected pages as a temporary workaround until a patch is available. Avoid using the ?GetCAPTCHAsetting string in HTTP requests to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-287

CWE-288

Related Identifiers

BDU:2023-02615

CVE-2020-15633

ZDI-20-881

Affected Products

D-Link Dir-867-Us

D-Link Dir-878

D-Link Dir-882-Us

References · 6

• https://bdu.fstec.ru/vul/2023-02615 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-881 · Security Note
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10186 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15633 · Security Note
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?nameSAP10186 · Note