PT-2023-5602 · D Link · D-Link Dar-8000

Llixixioo · Published 2023-09-24 · Updated 2024-08-02 · CVE-2023-5154

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DAR-8000 versions up to 20151231

Description The issue is related to an unrestricted file upload vulnerability in the /sysmanage/changelogo.php file of the D-Link DAR-8000 router's firmware. This vulnerability can be exploited remotely, allowing an attacker to execute arbitrary commands. The manipulation of the file upload argument leads to this unrestricted upload. The product is end-of-life and should be retired and replaced.

Recommendations For D-Link DAR-8000 versions up to 20151231, the recommended course of action is to retire and replace the product, as it is no longer supported by the maintainer. As a temporary workaround, consider restricting access to the /sysmanage/changelogo.php file to minimize the risk of exploitation. Avoid using the file upload argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2023-06257

CVE-2023-5154

Affected Products

D-Link Dar-8000

References · 10

• 🔥 https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20changelogo.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-5154 · Security Note
• https://bdu.fstec.ru/vul/2023-06257 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5154 · Vendor Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 · Vendor Advisory
• https://twitter.com/cracbot/status/1706549206562066911 · Twitter Post
• https://vuldb.com/?ctiid.240250 · Note
• https://vuldb.com/?id.240250 · Note
• https://t.me/cvenotify/88482 · Telegram Post
• https://t.me/cvenotify/86433 · Telegram Post