Command injection

2022-11-1723:15:00

PRIOn knowledge base

www.prio-n.com

dlink

router

command injection

ntp

jsonrpc

rce

security vulnerability

nvd

9.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

DLINK - DSL-224 Post-auth RCE.
DLINK router version 3.0.8 has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API.
It is possible to inject a command through this interface that will run with ROOT permissions on the router.

References

www.gov.il/en/Departments/faq/cve_advisories