PT-2023-5605 · D Link · D-Link Dar-7000

Llixixioo · Published 2023-09-24 · Updated 2024-08-02 · CVE-2023-5147

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DAR-7000 versions up to 20151231

Description The issue is related to an unrestricted file upload vulnerability in the /sysmanage/updateos.php file of the D-Link DAR-7000 router's firmware. This vulnerability can be exploited remotely, allowing an attacker to execute arbitrary commands. The manipulation of the 1 file upload argument leads to this unrestricted upload. It is possible to initiate the attack remotely.

Recommendations For D-Link DAR-7000 versions up to 20151231, the recommended course of action is to retire and replace the product, as it is no longer supported by the maintainer and is considered end-of-life. As a temporary workaround, consider restricting access to the /sysmanage/updateos.php file and avoiding the use of the 1 file upload argument until the issue is resolved. However, given the product's end-of-life status, the most secure solution is to replace it with a supported device.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2023-06260

CVE-2023-5147

Affected Products

D-Link Dar-7000

References · 11

• 🔥 https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20updateos.md · Exploit
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06260 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-5147 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5147 · Vendor Advisory
• https://t.me/cvenotify/58531 · Telegram Post
• https://t.me/cvenotify/86432 · Telegram Post
• https://vuldb.com/?ctiid.240243 · Note
• https://twitter.com/cracbot/status/1706549198676746407 · Twitter Post
• https://vuldb.com/?id.240243 · Note
• https://t.me/cvenotify/88475 · Telegram Post