Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:MISC:DLINK-CMD-INJ-PING |
|---|---|
Severity |
Critical |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Dlink Home Router Command Injection |
Release Date |
2019/10/09 |
Update Number |
3216 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Dlink Home Router Command Injection
This signature detects attempts to exploit a known vulnerability against Dlink Home Router. A successful attack can lead to command injection and arbitrary code execution.
Extended Description
Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.
Affected Products
- Dlink dhp-1565_firmware 1.01
- Dlink dir-652_firmware -
- Dlink dir-655_firmware 3.02b05
- Dlink dir-866l_firmware 1.03b04
References