CVE-2019-16920
Scores
EPSS Score
0.9434
CVSS
3.x 9.8
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
All CVSS Scores
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Не прошедшее проверку подлинности удаленное выполнение кода происходит в таких продуктах D-Link, как DIR-655C, DIR-866L, DIR-652 и DHP-1565. Проблема возникает, когда злоумышленник отправляет произвольный ввод в общий шлюзовый интерфейс устройства "PingTest", что может привести к общей инъекции. Злоумышленник, успешно инициировавший инъекцию команды, может добиться полного компрометации системы. Позже было независимо обнаружено, что это также затрагивает: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835 и DIR-825.
Sources
CWEs
Related Vulnerabilities
Exploits
Exploit ID: CVE-2019-16920
Source: github-poc
Vulnerable Software
Type: Configuration
Vendor: dlink
Product: dap-1533_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dap-1533_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dap-1533:-:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd
Type: Configuration
Vendor: dlink
Product: dhp-1565_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dhp-1565_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.01",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dhp-1565:ax:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd
Type: Configuration
Vendor: dlink
Product: dir-615_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dir-615_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dir-615:-:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd
Type: Configuration
Vendor: dlink
Product: dir-652_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dir-652_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dir-652:ax:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd
Type: Configuration
Vendor: dlink
Product: dir-655_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dir-655_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.02b05",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dir-655:cx:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd
Type: Configuration
Vendor: dlink
Product: dir-825_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dir-825_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dir-825:-:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd
Type: Configuration
Vendor: dlink
Product: dir-835_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dir-835_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dir-835:-:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd
Type: Configuration
Vendor: dlink
Product: dir-855l_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dir-855l_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dir-855l:-:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd
Type: Configuration
Vendor: dlink
Product: dir-862l_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dir-862l_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dir-862l:-:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd
Type: Configuration
Vendor: dlink
Product: dir-866l_firmware
Operating System: * * *
{
"children": [
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:o:dlink:dir-866l_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "1.03b04",
"vulnerable": true
}
],
"operator": "OR"
},
{
"cpe_match": [
{
"cpe23uri": "cpe:2.3:h:dlink:dir-866l:ax:*:*:*:*:*:*:*"
}
],
"operator": "OR"
}
],
"operator": "AND"
}Source: nvd