PT-2021-22600 · D Link · D-Link Dir816 A1 Fw101Cnb04

Doudoudedi · Published 2021-08-24 · Updated 2021-09-01 · CVE-2021-39510

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: D-Link DIR816 A1 FW101CNB04

Description: An issue was discovered in the D-Link DIR816 A1 FW101CNB04 750m11ac wireless router. The HTTP request parameter is used in the handler function of "/goform/form2userconfig.cgi" route, which can construct the user name string to delete the user function. This can lead to command injection through shell metacharacters.

Recommendations: For D-Link DIR816 A1 FW101CNB04, consider disabling the /goform/form2userconfig.cgi route until a patch is available to prevent command injection through shell metacharacters. Restrict access to this route to minimize the risk of exploitation. Avoid using the username parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2021-39510

Affected Products

D-Link Dir816 A1 Fw101Cnb04

References · 6

• 🔥 https://github.com/doudoudedi/main-DIR-816_A1_Command-injection/blob/main/injection_A1.md · Exploit
• https://osv.dev/vulnerability/CVE-2021-39510 · Vendor Advisory
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39510 · Security Note
• https://github.com/doudoudedi/main-DIR-816_A1_Command-injection · Note
• https://t.me/cvenotify/20482 · Telegram Post