PT-2024-3193 · D Link · D-Link Dir-822

Published 2024-04-22 · Updated 2024-07-03 · CVE-2024-33343

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-822+ version 1.0.5

Description The issue is related to the ChgSambaUserSettings() function in the prog.cgi script of the D-Link DIR-822+ wireless router's firmware. It is caused by the lack of proper sanitization of special elements used in the operating system command when processing the samba name parameter. This allows a remote attacker to execute arbitrary commands via the shell. The exploitation of this issue can enable remote attackers to perform unauthorized actions.

Recommendations For D-Link DIR-822+ version 1.0.5, as a temporary workaround, consider disabling the ChgSambaUserSettings() function until a patch is available. Restrict access to the prog.cgi script to minimize the risk of exploitation. Avoid using the samba name parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2024-03413

CVE-2024-33343

Affected Products

D-Link Dir-822

References · 10

• 🔥 https://github.com/n0wstr/IOTVuln/tree/main/DIR-822%2B/ChgSambaUserSettings · Exploit
• https://osv.dev/vulnerability/CVE-2024-33343 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03413 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-33343 · Security Note
• http://dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-822%2B · Note
• https://vuldb.com/?id.262193 · Note
• https://t.me/cvenotify/78198 · Telegram Post
• https://twitter.com/CVEnew/status/1783914147870347454 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1783962810189316172 · Twitter Post
• https://t.me/cvenotify/78188 · Telegram Post