D-Link Patches RCE Bugs in Wireless Access Point Gear

guest · Oct 5, 2018

D-Link Patches RCE Bugs in Wireless Access Point Gear
October 5, 2018
https://threatpost.com/d-link-patches-rce-bugs-in-wireless-access-point-gear/137960/

Four vulnerabilities were disclosed in D-Link’s software controller tool used in its enterprise-class wireless network access points. The disclosure, made on Thursday, also included two vulnerabilities that enabled attackers to remotely execute code with system permissions.

The flaws were discovered by a researcher with SecureAuth + Core Security. The bugs are tied to firmware controlling D-Link’s wireless access point gear called Central WiFiManager Software Controller, a tool used to help network administrators manage and monitor their wireless access point workflow via a centralized server.

lso found were two stored cross site scripting vulnerabilities bringing the total to four bugs (CVE-2018-17440, CVE-2018-17442, CVE-2018-17443, CVE-2018-17441).

The first two remote code execution flaws both “allow an attacker to run code as nt authority\system (so the attacker could get privileged access to execute any command),” a SecureAuth+Core Security spokesperson told Threatpost [...]
Click to expand...

Log in or Sign up

D-Link Patches RCE Bugs in Wireless Access Point Gear

guest Guest

Log in or Sign up

D-Link Patches RCE Bugs in Wireless Access Point Gear

guest Guest

Useful Searches