PT-2021-6097 · D Link · D-Link Dir-882

Published 2021-12-13 · Updated 2022-03-09 · CVE-2021-45998

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 versions prior to DIR 882 FW1.30B06 Hotfix 02

Description The issue is related to incorrect handling of the LocalIPAddress parameter, allowing remote attackers to execute arbitrary commands by sending specially crafted HNAP1 POST requests. This can lead to command injection, enabling attackers to perform unauthorized actions.

Recommendations For D-Link DIR-882 versions prior to DIR 882 FW1.30B06 Hotfix 02, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the HNAP1 API endpoint to minimize the risk of exploitation. Avoid using the LocalIPAddress parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2022-00762

CVE-2021-45998

Affected Products

D-Link Dir-882

References · 7

• 🔥❌ https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_4/4.md · Exploit, Deleted
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45998 · Security Note
• https://bdu.fstec.ru/vul/2022-00762 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45998 · Vendor Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10287 · Vendor Advisory
• https://t.me/cibsecurity/36840 · Telegram Post