CVE-2018-6530D-Link Multiple Routers OS Command Injection Vulnerability
Bekannt ausgenutzt — D-Link Multiple Routers OS Command Injection Vulnerability
CISA hat am 08.09.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 29.09.2022.
Erforderliche Maßnahme: The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use. https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10105; https://nvd.nist.gov/vuln/detail/CVE-2018-6530
Beschreibung
OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| dlink | dir-860l firmware | ≤ 1.10b04 | |
| dlink | dir-865l firmware | ≤ 1.08b01 | |
| dlink | dir-868l firmware | ≤ 1.12b04 | |
| dlink | dir-880l firmware | ≤ 1.08b04 |
Referenzen und Patches
- ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf Release NotesVendor Advisory
- ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf Release NotesVendor Advisory
- https://github.com/TheBeeMan/Pwning-multiple-dlink-router-via-SOAP-proto ExploitThird Party Advisory
- ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf Release NotesVendor Advisory
- ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-880L/REVA/DIR-880L_REVA_FIRMWARE_PATCH_NOTES_1.08B06_EN_WW.pdf Release NotesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-6530 US Government Resource
CPE-Treffer (NVD) (4)
cpe:2.3:o:dlink:dir-860l_firmware:*:*:*:*:*:*:*:*≤ 1.10b04cpe:2.3:o:dlink:dir-865l_firmware:*:*:*:*:*:*:*:*≤ 1.08b01cpe:2.3:o:dlink:dir-868l_firmware:*:*:*:*:*:*:*:*≤ 1.12b04cpe:2.3:o:dlink:dir-880l_firmware:*:*:*:*:*:*:*:*≤ 1.08b04