PT-2021-2654 · D Link · D-Link Dsl-320B-D1

Gabriele Gristina · Published 2021-03-07 · Updated 2024-08-03 · CVE-2021-26709

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DSL-320B-D1 devices through EU 1.25

Description The issue is related to a buffer overflow in the device's firmware, allowing a remote attacker to gain unauthorized access to the device with user login.xgi privileges. The vulnerability can be exploited by unauthenticated remote attackers via the login.xgi user and pass parameters. It is noted that this issue only affects products that are no longer supported by the maintainer.

Recommendations For D-Link DSL-320B-D1 devices through EU 1.25, as a temporary workaround, consider disabling the login.xgi user until a patch is available. Restrict access to the device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-787

Related Identifiers

BDU:2021-02183

CVE-2021-26709

Affected Products

D-Link Dsl-320B-D1

References · 11

• 🔥 http://packetstormsecurity.com/files/162133/D-Link-DSL-320B-D1-Pre-Authentication-Buffer-Overflow.html · Exploit
• https://osv.dev/vulnerability/CVE-2021-26709 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26709 · Security Note
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10216 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02183 · Security Note
• https://t.me/defcon_news/73270 · Telegram Post
• https://t.me/cvenotify/12803 · Telegram Post
• https://vuldb.com/?id.172579 · Note
• http://seclists.org/fulldisclosure/2021/Apr/15 · Note
• https://t.me/defcon_news/73229 · Telegram Post