Vulnerabilities for Dir-818lw firmware (...) - CXSECURITY.COM

Vulnerabilities for 'Dir-818lw firmware'

2019-05-13

CVE-2018-19987

CWE-78

D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in /HNAP1/SetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint parameter is saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. A vulnerable /HNAP1/SetAccessPointMode XML message could have shell metacharacters in the IsAccessPoint element such as the `telnetd` string.

CVE-2018-19986

CWE-78

In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. In the SetRouterSettings.php source code, the RemotePort parameter is saved in the $path_inf_wan1."/web" internal configuration memory without any regex checking. And in the IPTWAN_build_command function of the iptwan.php source code, the data in $path_inf_wan1."/web" is used with the iptables command without any regex checking. A vulnerable /HNAP1/SetRouterSettings XML message could have shell metacharacters in the RemotePort element such as the `telnetd` string.

>>> Vendor: D-link 231 Products

Dcs-900 internet camera

Dsa-3100 airspot gateway

Di-604 broadband router

Ebr-2310 ethernet broadband router

Wbr-1310 wireless g router

Wbr-2310 rangebooster g router

Mpeg4 shm audio control

Camera stream client activex control

Dcs-5605 ptz ip network camera

Dcs-932l camera

Dcs-932l camera firmware

Dsr-1000 firmware

Dsr-1000n firmware

Dsr-150 firmware

Dsr-150n firmware

Dsr-250 firmware

Dsr-250n firmware

Dsr-500 firmware

Dsr-500n firmware

Dap 2253 firmware

Dir-505l shareport mobile companion

Dir-826l wireless n600 cloud router

Dir-505l shareport mobile companion firmware

Dir-826l wireless n600 cloud router firmware

Dap 1150 firmware

Dap-1350 firmware

Dir505 shareport mobile companion

Dir505 shareport mobile companion firmware

Dir505l shareport mobile companion firmware

Dsp-w215 firmware

Dir-601 firmware

Dir-645 firmware

Dcs-2103 hd cube network camera

Dcs-2103 hd cube network camera firmware

Dir-655 firmware

Dir-600 firmware

Dap-1360 firmware

Dsl-2730b firmware

Dcs-931l firmware

Dap-1320 firmware

Dcs-932l firmware

See all Products for Vendor D-link

Copyright 2024, cxsecurity.com