PT-2022-5529 · D Link · D-Link Dir-1935
Published
2022-07-22
·
Updated
2023-11-08
·
CVE-2022-43631
CVSS v2.0
7.7
High
| Vector | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
D-Link DIR-1935 version 1.03
Description
This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of
SetVirtualServerSettings requests to the web management portal, specifically when parsing subelements within the VirtualServerInfo element. The process does not properly validate a user-supplied string before using it to execute a system call, allowing an attacker to execute code in the context of root.Recommendations
For D-Link DIR-1935 version 1.03, as a temporary workaround, consider disabling the
SetVirtualServerSettings function until a patch is available. Restrict access to the web management portal to minimize the risk of exploitation. Avoid using user-supplied strings in the VirtualServerInfo element until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.Fix
OS Command Injection
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
D-Link Dir-1935