D-Link Patches RCE Bugs in Wireless Access Point Gear

🗓️ 05 Oct 2018 19:07:44Reported by Lindsey O'DonnellType

D-Link Central WiFiManager Software Controller has patched multiple vulnerabilities, including remote code execution flaws and stored cross-site scripting vulnerabilities affecting D-Link's enterprise-class wireless access points.

Reporter	Title	Published	Views	Family All 75
zdt	D-Link Central WiFiManager Software Controller Code Execution / XSS Exploit	5 Oct 201800:00	–	zdt
GithubExploit	Exploit for CVE-2014-8361	31 Mar 202611:18	–	githubexploit
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	8 Dec 202020:38	–	gitee
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	6 May 202015:20	–	gitee
Gitee	Exploit for OS Command Injection in Dlink Dir-655_Firmware	16 Oct 201908:48	–	gitee
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ICS	People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices	10 Jun 202212:00	–	ics
attackerkb	CVE-2019-16920	27 Sep 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the UpdateSite function in the software controller for centralized control of wireless networks by D-Link Central WiFi Manager allows a intruder to inject any arbitrary code into the uploaded web page.	10 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the onUploadLogPic component of the software controller allows for the insertion of arbitrary HTML code by intruders, enabling them to manipulate wireless networks through the D-Link Central WiFi Manager.	10 Jan 201900:00	–	bdu_fstec

Source	Link
coresecurity	www.coresecurity.com/advisories/d-link-central-wifimanager-software-controller-multiple-vulnerabilities
securityadvisories	www.securityadvisories.dlink.com/announcement/publication.aspx
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

05 Oct 2018 19:07Current

1.1Low risk

Vulners AI Score1.1

EPSS0.99996