Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2013-6026

Published: 19/10/2013 Updated: 21/10/2013
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 891
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Dir-100

Vulnerability Summary

The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote malicious users to bypass authentication and modify settings via an xmlset_roodkcableoj28840ybtide User-Agent HTTP header, as exploited in the wild in October 2013.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

d-link dir-100 -

d-link dir-120 -

d-link di-624s -

d-link di-604s -

d-link di-604\\+ -

d-link tm-g5240 -

d-link di-524up -

d-link di-604up -

alphanetworks vdsl asl-56552 -

alphanetworks vdsl asl-55052 -

planex brl-04ur -

planex brl-04r -

planex brl-04cw -

Mailing Lists

Packetstorm: D-Link Backdoor Czechr
This is a simple PHP script that checks to see if your D-Link device is vulnerable to the User-Agent backdoor ...

Github Repositories

bamf

BAMF (Backdoor Access Machine Farmer)

BAMF (Backdoor Access Machine Farmer) DISCLAIMER: This project should be used for authorized testing and educational purposes only BAMF is an open-source tool designed to leverage Shodan (a search engine for the Internet of Things) to discover vulnerable routers, then utilize detected backdoors/vulnerabilities to remotely access the router administration panel and modify the

bamf-SHODAN.IO

BAMF (Backdoor Access Machine Farmer) DISCLAIMER: This project should be used for authorized testing and educational purposes only BAMF is an open-source tool designed to leverage Shodan (a search engine for the Internet of Things) to discover vulnerable routers, then utilize detected backdoors/vulnerabilities to remotely access the router administration panel and modify the

References

CWE-264http://www.kb.cert.org/vuls/id/248083http://www.dlink.com/uk/en/support/securityhttp://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/https://github.com/malwaredllc/bamfhttps://nvd.nist.govhttps://www.kb.cert.org/vuls/id/248083
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-25675CVE-2023-21072physicalCVE-2023-28446encryptionCVE-2023-21076server-side request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook