PT-2021-6098 · D Link · D-Link Dir-882

Published 2021-12-13 · Updated 2022-07-12 · CVE-2021-44881

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR 882 version DIR 882 FW1.30B06 Hotfix 02

Description The issue is related to a command injection vulnerability in the twsystem function. This allows attackers to execute arbitrary commands via a crafted HNAP1 POST request to the / API endpoint, although the exact endpoint is not specified. The vulnerability is due to the lack of proper neutralization of special elements used in the operating system command.

Recommendations For D-Link DIR 882 version DIR 882 FW1.30B06 Hotfix 02, as a temporary workaround, consider disabling the twsystem() function until a patch is available. Restrict access to the HNAP1 protocol to minimize the risk of exploitation. Avoid using the vulnerable function in the affected device until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2022-00766

CVE-2021-44881

Affected Products

D-Link Dir-882

References · 8

• 🔥❌ https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_3/3.md · Exploit, Deleted
• https://bdu.fstec.ru/vul/2022-00766 · Security Note
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44881 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44881 · Vendor Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10287 · Vendor Advisory
• https://t.me/cvenotify/26255 · Telegram Post
• https://t.me/cibsecurity/36824 · Telegram Post