Vulnerability CVE-2018-19300
Published: 2019-04-11

Description:
On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well.

Type:

CWE-20

 (Improper Input Validation)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
D-link -> Dap-1530 firmware 
D-link -> Dap-1610 firmware 
D-link -> Dwr-111 firmware 
D-link -> Dwr-116 firmware 
D-link -> Dwr-512 firmware 
D-link -> Dwr-711 firmware 
D-link -> Dwr-712 firmware 
D-link -> Dwr-921 firmware 

 References:
https://community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers/1772
https://eu.dlink.com/de/de/support/support-news/2019/march/19/remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers
https://www.greenbone.net/en/serious-vulnerability-discovered-in-d-link-routers/
https://www.greenbone.net/schwerwiegende-sicherheitsluecke-in-d-link-routern-entdeckt/
Copyright 2024, cxsecurity.com

 

Back to Top