Lucene search

[email protected]CVE-2013-7471

HistoryJun 11, 2019 - 9:29 p.m.

CVE-2013-7471

2019-06-1121:29:00

CWE-77

[email protected]

web.nvd.nist.gov

cve-2013-7471

d-link

dir-845

dir-600

dir-645

dir-300

dir-865

command injection

security vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.06 Low

EPSS

Percentile

93.5%

JSON

An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request.

CPENameOperatorVersion
dlink:dir-300_firmwaredlink dir-300 firmwareeq2.14b01
dlink:dir-600_firmwaredlink dir-600 firmwarelt2.17b01
dlink:dir-645_firmwaredlink dir-645 firmwarelt1.04b11
dlink:dir-845_firmwaredlink dir-845 firmwarelt1.02b03
dlink:dir-865_firmwaredlink dir-865 firmwareeq1.05b03

CPE	Name	Operator	Version
dlink:dir-300_firmware	dlink dir-300 firmware	eq	2.14b01
dlink:dir-600_firmware	dlink dir-600 firmware	lt	2.17b01
dlink:dir-645_firmware	dlink dir-645 firmware	lt	1.04b11
dlink:dir-845_firmware	dlink dir-845 firmware	lt	1.02b03
dlink:dir-865_firmware	dlink dir-865 firmware	eq	1.05b03

References

www.s3cur1ty.de/m1adv2013-020

www.exploit-db.com/exploits/27044

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.06 Low

EPSS

Percentile

93.5%

JSON

Related for CVE-2013-7471

prion1 cvelist1