PT-2021-20708 · D Link · D-Link Dap-2020

Chung96Vn · Published 2021-08-18 · Updated 2023-04-26 · CVE-2021-34860

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001

Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling of the getpage parameter provided to the "webproc" endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this issue to disclose information in the context of root.

Recommendations: For D-Link DAP-2020 version 1.01rc001, as a temporary workaround, consider restricting access to the "webproc" endpoint until a patch is available. Avoid using the getpage parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-34860

ZDI-21-976

Affected Products

D-Link Dap-2020

References · 8

• https://zerodayinitiative.com/advisories/ZDI-21-976 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-34860 · Security Note
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10201 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-34860 · Vendor Advisory
• https://t.me/cvenotify/22347 · Telegram Post
• https://t.me/cibsecurity/31169 · Telegram Post
• https://t.me/cvenotify/22496 · Telegram Post
• https://t.me/cvenotify/49121 · Telegram Post