The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to execute arbitrary system commands.

🗓️ 07 Jul 2016 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

D-Link DSR-500 router vulnerability allows arbitrary system command execution by chaining commands with a separator.

Reporter	Title	Published	Views	Family All 16
zdt	D-Link DSR Router Series - Remote Root Shell Exploit	7 Dec 201300:00	–	zdt
BDU FSTEC	The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain administrator privileges.	7 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the D-Link DSR-150 router’s microprogramming software allows a malicious individual to gain administrator privileges.	7 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the D-Link DSR-250 router’s microprogramming software allows a malicious individual to gain administrator privileges.	7 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed routing software D–Link DSR–1000, which allows a malicious individual to gain administrator privileges	7 Jul 201600:00	–	bdu_fstec
CVE	CVE-2013-5946	19 Dec 201302:00	–	cve
Cvelist	CVE-2013-5946	19 Dec 201302:00	–	cvelist
Exploit DB	D-Link DSR Router Series - Remote Command Execution	6 Dec 201300:00	–	exploitdb
EUVD	EUVD-2013-5778	7 Oct 202500:30	–	euvd
exploitpack	D-Link DSR Router Series - Remote Command Execution	6 Dec 201300:00	–	exploitpack

Vulners

Node

d-link dsr-500Range≤1.08b51

Source	Link
xn--exploitdb-w89d	www.xn--exploitdb-w89d.com/papers/30061/
tsd	www.tsd.dlink.com.tw/temp/PMD/13145/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.09B58(WW).pdf
web	www.web.nvd.nist.gov/view/vuln/detail

21 Jun 2017 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 210

EPSS0.06516

D-Link DSR-500 router vulnerability arbitrary command execution web interface