CVE-2018-19987

D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A…

published May 13, 2019

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky command injection vulnerability lurks in several D-Link routers! Just by mishandling a single parameter, an attacker could gain unauthorized access through the ShellPath script—it's like leaving the front door open and hoping no one walks in! 🔑 Think of it like a restaurant where the chef accepts orders without verifying if the ingredients are safe. If someone sneaks in a harmful ingredient in the order, it could spoil the entire dish! In this case, the IsAccessPoint parameter is the rogue ingredient, and the script runs it without a second thought. If exploited, an attacker could inject arbitrary commands into the system, potentially allowing them to take control of the device—imagine a thief not just in your house, but also messing with every room and item inside! This could lead to unauthorized data access or device manipulation, making it a serious concern for users.

Put simply

Think of it like a restaurant where the chef accepts orders without verifying if the ingredients are safe. If someone sneaks in a harmful ingredient in the order, it could spoil the entire dish! In this case, the IsAccessPoint parameter is the rogue ingredient, and the script runs it without a second thought. This vulnerability in D-Link routers allows command injection through the IsAccessPoint parameter in the /HNAP1/SetAccessPointMode endpoint. It fails to properly validate input before executing commands defined in the ShellPath script, opening the door for attackers to run arbitrary commands.

What to do

If exploited, an attacker could inject arbitrary commands into the system, potentially allowing them to take control of the device—imagine a thief not just in your house, but also messing with every room and item inside! This could lead to unauthorized data access or device manipulation, making it a serious concern for users. To ensure your device’s security, update to the latest firmware version immediately. Check D-Link’s support site for any available patches for your specific model and regularly audit your network settings for any unusual activity. 🛡️ You've got this! By taking these steps, you'll bolster your defenses and keep your network safe from sneaky intrusions! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12932 · 96.3th percentile
Published
2019-05-13T13:23Z
EPSS history
Timeline
  • 13 MAY 13:23Z
    D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A…
    cvelistv5