Severe D-Link router vulnerabilities disclosed, patch now

guest · Jul 24, 2020

5 severe D-Link router vulnerabilities disclosed, patch now
July 24, 2020
https://www.bleepingcomputer.com/ne...k-router-vulnerabilities-disclosed-patch-now/

This month has been quite eventful for D-Link.
Now, the company has disclosed five severe vulnerabilities in some of their router models, which could allow a severe network compromise. Moreover, some devices have reached their "end of life" phase, which means they wouldn't be patched.

The vulnerabilities reported by ACE Team – Loginsoft include reflected Cross-Site Scripting (XSS) attacks, buffer overflows to means of obtaining admin credentials, bypassing authentication altogether, and executing arbitrary code.
Click to expand...

It should be noted that while many of these D-Link devices may not be vulnerable, it does illustrate how too many of them have remote administration enabled.
Proof of Concept exploits released
The Loginsoft advisories include proof of concept (PoC) exploits that illustrate how easy it is to abuse the newly disclosed D-Link vulnerabilities.
Click to expand...

D-Link’s response
In a comprehensive advisory covering all CVEs, D-Link released a list of all vulnerable firmware versions and hardware devices.
Click to expand...

advisory

CVE-2020-15892 :: Link :: DAP 1520 :: Buffer overflow in the `ssi` binary, leading to arbitrary command execution.
CVE-2020-15893 :: Link :: DIR-816L :: Command injection vulnerability in the UPnP via a crafted M-SEARCH packet
CVE-2020-15894 :: Link :: DIR-816L :: Exposed administration function, allowing unauthorized access to the few sensitive information.
CVE-2020-15895 :: Link :: DIR-816L :: Reflected XSS vulnerability due to an unescaped value on the device configuration
CVE-2020-15896 :: Link :: DAP-1522 :: Exposed administration function, allowing unauthorized access to the few sensitive information.
Click to expand...

guest · Jul 16, 2021

D-Link issues hotfix for hard-coded password router vulnerabilities
July 16, 2021
https://www.bleepingcomputer.com/ne...r-hard-coded-password-router-vulnerabilities/

D-Link has issued a firmware hotfix to address multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router.

Following successful exploitation, they can let attackers execute arbitrary code on unpatched routers, gain access to sensitive information or crash the routers after triggering a denial of service state.
The DIR-3040 security flaws discovered and reported by Cisco Talos security researcher Dave McDaniel include hardcoded passwords, command injection, and information disclosure bugs.
Click to expand...

D-Link says that the firmware hotfix released to address the bugs found by Cisco Talos is "a device beta software, beta firmware, or hot-fix release which is still undergoing final testing before its official release."
Click to expand...

advisory

TALOS-2021-1281 CVE-2021-21816 - Syslog information disclosure vulnerability

TALOS-2021-1282 CVE-2021-21817 - Zebra IP Routing Manager information disclosure vulnerability

TALOS-2021-1283 CVE-2021-21818 - Zebra IP Routing Manager hard-coded password vulnerability

TALOS-2021-1284 CVE-2021-21819 - Libcli command injection vulnerability

TALOS-2021-1285 CVE-2021-21820 - Libcli Test Environment hard-coded password vulnerability

Click to expand...

guest · Sep 23, 2021

Vulnerability Spotlight: Information disclosure vulnerability in D-LINK DIR-3040 mesh router
September 23, 2021
https://blog.talosintelligence.com/2021/09/vuln-spotlight-d-link-.html

Cisco Talos recently discovered an exploitable information disclosure vulnerability in the D-LINK DIR-3040 smart WiFi mesh router that could allow an adversary to eventually turn off the device or remove other connected devices from the mesh network.

TALOS-2021-1361 (CVE-2021-21913) is a vulnerability that an attacker could trigger with a specially crafted network request. Eventually, the attacker could view sensitive information in the MQTT service, including the root password of the primary device.
Then, they could push the appropriate payloads to execute remote code on the targeted device, potentially allowing them to reboot any device on the mesh network or remove devices from the mesh completely.
Click to expand...

Users are encouraged to update these affected products as soon as possible: D-LINK DIR-3040 router, version 1.13B03. Talos tested and confirmed these versions of the library could be exploited by this vulnerability.
Click to expand...

Log in or Sign up

Severe D-Link router vulnerabilities disclosed, patch now

guest Guest

guest Guest

guest Guest

Log in or Sign up

Severe D-Link router vulnerabilities disclosed, patch now

guest Guest

guest Guest

guest Guest

Useful Searches