ID
VAR-E-201303-0485
CVE
| cve_id: | CVE-2013-2271 | Trust: 2.7 |
EDB ID
24563
TITLE
D-Link DSL-2740B ADSL Router - Authentication Bypass - Hardware webapps Exploit
Trust: 0.6
DESCRIPTION
D-Link DSL-2740B ADSL Router - Authentication Bypass. CVE-2013-2271CVE-90822 . webapps exploit for Hardware platform
Trust: 0.6
AFFECTED PRODUCTS
| vendor: | d link | model: | dsl-2740b adsl router | scope: | - | version: | - | Trust: 1.0 |
| vendor: | d link | model: | dsl-2740b authentication | scope: | - | version: | - | Trust: 0.5 |
EXPLOIT
+------------------------------------------------------------------------------------------------------------------------------------------+
# Exploit Title : D-Link DSL-2740B (ADSL Router) Authentication Bypass
# Date : 10-02-2013
# Author : Ivano Binetti (http://ivanobinetti.com)
# Vendor site : http://www.d-link.com
# Version : DSL-2740B
# Tested on : Firmware Version: EU_1.0 (other models/firmware could be also affected)
# Original Advisory : http://www.webapp-security.com/2013/03/d-link-dsl-2740b-adsl-router-authentication-bypass/
# CVE : CVE-2013-2271
+-------------------------------------------------------------------------------------------------------------------------------------------+
+---------------------------------------[D-Link DSL-2740B Bypass Authentication by Ivano Binetti]-------------------------------------------+
Summary
1)Introduction
2)Vulnerability Description
3)Exploit
+--------------------------------------------------------------------------------------------------------------------------------------------+
1)Introduction
D-Link DSL-2740B is an ADSL Router using a web management interface in order to change configuration settings.
2)Vulnerability Description
This router allows an attacker to bypass authentication and to login with administrator ("admin" user) permissions.
When the administrator is logged in the web management interface, an attacker is be able to completely bypass authentication phase and
connect to the web management interface with administrator's credentials.
Please observe that the default URL to access to the web management interface is "http://192.168.1.1" but this attack can also be
performed by an axternal attacker who connects to the router's public IP address, if remote management is enabled.
3)Exploit
When an administrator in logged in the web management interface an attacker can bypass authentication and get administrator permissions
connecting to the following URL:
http://<ip address>/login.cgi (where <ip address> can be both internal or public)
Trust: 1.0
EXPLOIT LANGUAGE
txt
Trust: 0.6
PRICE
free
Trust: 0.6
TYPE
Authentication Bypass
Trust: 1.0
TAGS
| tag: | exploit | Trust: 0.5 |
| tag: | bypass | Trust: 0.5 |
CREDITS
Ivano Binetti
Trust: 0.6
EXTERNAL IDS
| db: | NVD | id: | CVE-2013-2271 | Trust: 2.7 |
| db: | EXPLOIT-DB | id: | 24563 | Trust: 1.6 |
| db: | EDBNET | id: | 46653 | Trust: 0.6 |
| db: | 0DAYTODAY | id: | 20469 | Trust: 0.6 |
| db: | EDBNET | id: | 20349 | Trust: 0.6 |
| db: | PACKETSTORM | id: | 120613 | Trust: 0.5 |
REFERENCES
| url: | https://nvd.nist.gov/vuln/detail/cve-2013-2271 | Trust: 2.7 |
| url: | http://www.webapp-security.com/2013/03/d-link-dsl-2740b-adsl-router-authentication-bypass/ | Trust: 1.0 |
| url: | https://www.exploit-db.com/exploits/24563/ | Trust: 0.6 |
| url: | https://0day.today/exploits/20469 | Trust: 0.6 |
SOURCES
| db: | PACKETSTORM | id: | 120613 |
| db: | EXPLOIT-DB | id: | 24563 |
| db: | EDBNET | id: | 46653 |
| db: | EDBNET | id: | 20349 |
LAST UPDATE DATE
2022-07-27T09:27:34.624000+00:00
SOURCES RELEASE DATE
| db: | PACKETSTORM | id: | 120613 | date: | 2013-03-02T03:15:42 |
| db: | EXPLOIT-DB | id: | 24563 | date: | 2013-03-04T00:00:00 |
| db: | EDBNET | id: | 46653 | date: | 2013-03-04T00:00:00 |
| db: | EDBNET | id: | 20349 | date: | 2013-03-02T00:00:00 |