PT-2019-14247
CVE-2019-15527
·
Publicado
2019-08-23
·
Atualizado
2020-08-24
Descrição por
CVSS 2.0
9.0
AltaMétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
D-Link DIR-823G version V1.0.2B05
Description
A command injection issue was discovered in the HNAP1 protocol, which is exploitable with authentication. This issue occurs due to shell metacharacters in the
MaxIdTime field when using the SetWanSettings function.Recommendations
For D-Link DIR-823G version V1.0.2B05, consider restricting access to the HNAP1 protocol until a patch is available. As a temporary workaround, avoid using shell metacharacters in the
MaxIdTime field to minimize the risk of exploitation.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾