Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2018-19987

Published: 13/05/2019 Updated: 26/04/2023
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 891
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to D-link

Vulnerability Summary

D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in /HNAP1/SetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint parameter is saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. A vulnerable /HNAP1/SetAccessPointMode XML message could have shell metacharacters in the IsAccessPoint element such as the `telnetd` string.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

d-link dir-818lw_firmware 2.05.b03

d-link dir-822_firmware 202krb06

dlink dir-822_firmware 3.10b06

d-link dir-860l_firmware 2.03.b03

d-link dir-868l_firmware 2.05b02

d-link dir-880l_firmware 1.20b01_01_i3se

d-link dir-890l\\/r_firmware 1.21b02

Github Repositories

https://github.com/nahueldsanchez/blogpost_cve-2018-19987-analysis

This repo has a blog post about my analysis for CVE-2018-19987 an authenticated OS command injection affecting multiple D-Link routers

CVE-2018-19987 (D-Link OS command injection) analysis Hello there! In this short blog post I'll break down a quick analysis that I performed to better understand the details behind CVE-2018-19987 At the beginning I went after this CVE because I thought that there wasn't any public information or exploit Shortly after doing a first analysis, I found two public PoCs

https://github.com/caro-oviedo/Copy-Editing

Copy-Editing Collaboration CVE-2018-19987 (D-Link OS command injection) analysis Analyzing a buffer overflow in the DLINK DIR-645 with Qiling framework, Part I Analyzing a buffer overflow in the DLINK DIR-645 with Qiling framework, Part II TL; DR

References

CWE-78https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-19986%20-%2019990https://nvd.nist.govhttps://github.com/nahueldsanchez/blogpost_cve-2018-19987-analysis
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook