ID
VAR-201304-0481
TITLE
D-LINK DIR-615/DIR-300 HTTP Header Injection Vulnerability
Trust: 0.6
DESCRIPTION
The D-LINK DIR-615/DIR-300 set/runtime/diagnostic/pingIp and exeshell parameters lack sufficient validation of the input, allowing authenticated remote attackers to exploit the vulnerability to execute arbitrary OS commands. The D-LINK DIR-615/DIR-300 incorrectly restricts access to the DevInfo.txt file, allowing remote attackers to exploit the vulnerability to submit requests directly to obtain device information, including model, hardware version, linux kernel information, firmware version, language and MAC. address. The D-LINK DIR-615/DIR-300 password storage is not hashed and stored in the /var/etc/httppasswd file in plain text, which can lead to the disclosure of sensitive information. The D-LINK DIR-615/DIR-300 change password does not require a current password, allowing an attacker to change the password without having to know the authentication credentials. D-Link DIR-600 and DIR-300 are wireless routers. The following security vulnerabilities exist in D-Link DIR-600 and DIR-300: 1. Multiple command injection vulnerabilities 2. Cross-site request forgery vulnerabilities 3. Cross-site scripting vulnerabilities 4. Encryption algorithm vulnerabilities 5. Multiple information leakage vulnerabilities 6. HTTP header injection vulnerability 7. Security bypass vulnerability. Attackers can use these vulnerabilities to gain access to potentially sensitive information, crack stored passwords, execute arbitrary commands in the context of the affected device, steal cookie-based authentication, perform unauthorized operations in the user's session context, or redirect users Visit any website and execute HTTP request privately, there may be other forms of attacks. Other attacks are also possible
Trust: 4.59
IOT TAXONOMY
| category: | ['IoT', 'Network device'] | sub_category: | - | Trust: 4.2 |
AFFECTED PRODUCTS
| vendor: | d link | model: | dir-300 | scope: | eq | version: | 1.05 | Trust: 4.5 |
| vendor: | d link | model: | dir-615 | scope: | eq | version: | 4.13 | Trust: 4.2 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
THREAT TYPE
remote
Trust: 0.6
TYPE
Unknown
Trust: 0.3
PATCH
| title: | D-LINK DIR-615/DIR-300 HTTP header injection vulnerability patch | url: | https://www.cnvd.org.cn/patchinfo/show/33635 | Trust: 0.6 |
| title: | Patch for D-LINK DIR-615/DIR-300 Reflective Cross-Site Scripting Vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/33634 | Trust: 0.6 |
| title: | D-LINK DIR-615/DIR-300 OS Command Injection Vulnerability Patch | url: | https://www.cnvd.org.cn/patchinfo/show/33630 | Trust: 0.6 |
| title: | Patch for D-LINK DIR-615/DIR-300 Sensitive Information Disclosure Vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/33636 | Trust: 0.6 |
| title: | D-LINK DIR-615/DIR-300 Patch for Unsecure Encryption Storage Vulnerabilities | url: | https://www.cnvd.org.cn/patchinfo/show/33633 | Trust: 0.6 |
| title: | Patch for D-LINK DIR-615/DIR-300 Cross-Site Request Forgery Vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/33632 | Trust: 0.6 |
| title: | Patch for D-LINK DIR-615/DIR-300 Password Change Vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/33631 | Trust: 0.6 |
EXTERNAL IDS
| db: | BID | id: | 59405 | Trust: 5.1 |
| db: | CNVD | id: | CNVD-2013-04211 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2013-04209 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2013-04205 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2013-04212 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2013-04208 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2013-04207 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2013-04206 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-201304-510 | Trust: 0.6 |
REFERENCES
| url: | http://seclists.org/bugtraq/2013/apr/148 | Trust: 4.2 |
| url: | http://www.securityfocus.com/bid/59405 | Trust: 0.6 |
| url: | http://www.dlink.com/products/?pid=565 | Trust: 0.3 |
| url: | http://www.dlink.com/ | Trust: 0.3 |
CREDITS
Michael Messner
Trust: 0.9
SOURCES
| db: | CNVD | id: | CNVD-2013-04211 |
| db: | CNVD | id: | CNVD-2013-04209 |
| db: | CNVD | id: | CNVD-2013-04205 |
| db: | CNVD | id: | CNVD-2013-04212 |
| db: | CNVD | id: | CNVD-2013-04208 |
| db: | CNVD | id: | CNVD-2013-04207 |
| db: | CNVD | id: | CNVD-2013-04206 |
| db: | BID | id: | 59405 |
| db: | CNNVD | id: | CNNVD-201304-510 |
LAST UPDATE DATE
2022-05-17T02:05:56.995000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2013-04211 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04209 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04205 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04212 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04208 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04207 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04206 | date: | 2013-04-26T00:00:00 |
| db: | BID | id: | 59405 | date: | 2013-08-08T05:15:00 |
| db: | CNNVD | id: | CNNVD-201304-510 | date: | 2013-04-24T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2013-04211 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04209 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04205 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04212 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04208 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04207 | date: | 2013-04-26T00:00:00 |
| db: | CNVD | id: | CNVD-2013-04206 | date: | 2013-04-26T00:00:00 |
| db: | BID | id: | 59405 | date: | 2013-04-22T00:00:00 |
| db: | CNNVD | id: | CNNVD-201304-510 | date: | 2013-04-24T00:00:00 |