PT-2018-3062

🗓️ 20 Nov 2018 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 3 Views

Remote code execution in D-Link Central WiFi Manager CWM(100) via /web/Public/Conn.php.

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	D-Link Central WiFi Manager Component Code Execution	9 Oct 201900:00	–	bdu_fstec
Circl	CVE-2019-13373	7 Jul 201901:59	–	circl
CNVD	D-Link Central WiFi Manager (CWM-100) Arbitrary SQL Command Query Vulnerability	8 Jul 201900:00	–	cnvd
Check Point Advisories	D-Link Central WiFiManager CWM-100 SQL Injection (CVE-2019-13373)	14 Nov 202200:00	–	checkpoint_advisories
CVE	CVE-2019-13373	6 Jul 201922:54	–	cve
Cvelist	CVE-2019-13373	6 Jul 201922:54	–	cvelist
Metasploit	D-Link Central WiFiManager SQL injection	6 Jul 201900:00	–	metasploit
NVD	CVE-2019-13373	6 Jul 201923:15	–	nvd
osv_cve	CVE-2019-13373	6 Jul 201923:15	–	osv_cve
Packet Storm	D-Link Central WiFiManager SQL Injection	31 Aug 202400:00	–	packetstorm

Source	Link
unh3x	www.unh3x.github.io/2019/02/21/D-link-(CWM-100)-Multiple-Vulnerabilities
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-13373
unh3x	www.unh3x.github.io/2019/02/21/D-link-%28CWM-100%29-Multiple-Vulnerabilities
github	www.github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-%28CWM-100%29-Multiple-Vulnerabilities.md
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/dlink/dlink_central_wifimanager_sqli.rb
t	www.t.me/cvenotify/286
cxsecurity	www.cxsecurity.com/cveshow/CVE-2019-13373
supportannouncement	www.supportannouncement.us.dlink.com/announcement/publication.aspx
osv	www.osv.dev/vulnerability/CVE-2019-13373
github	www.github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-(CWM-100)-Multiple-Vulnerabilities.md

09 Jul 2019 00:00Current

CVSS 3.19.8

CVSS 27.5

CVSS 39.8

EPSS0.68019

D-Link Central WiFi Manager CWM(100)remote code execution /web/Public/Conn.php dbSQL SQL injection