A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection.
It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Attack Parameters
Attack Vector
Network
Атака возможна удалённо
Attack Complexity
Low
Легко эксплуатировать
Attack Requirements
None
Нет дополнительных условий
Privileges Required
None
Права не нужны
User Interaction
None
Не нужно действие пользователя
Impact Assessment
Confidentiality
High
Полная утечка данных
Integrity
High
Полная модификация данных
Availability
High
Полный отказ в обслуживании
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products 2
dlink:dir-868l_firmware
dlink:dir-868l
Known Affected Software Configurations 2
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Dlink Dir-868l_Firmware
cpe:2.3:o:dlink:dir-868l_firmware:110b03:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dir-868l
cpe:2.3:h:dlink:dir-868l:-:*:*:*:*:*:*:*
|
— | — |