CVE-2018-17440

Опубликовано: 08 окт. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default on port 9000 and has hardcoded credentials (admin, admin). Taking advantage of this, a remote unauthenticated attacker could execute arbitrary PHP code by uploading any file in the web root directory and then accessing it via a request.

Ссылки

http://seclists.org/fulldisclosure/2018/Oct/11
Exploit
Mailing List
Third Party Advisory
https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10092
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/45533/
Exploit
Third Party Advisory
VDB Entry
https://www.secureauth.com/labs/advisories/d-link-central-wifimanager-software-controller-multiple-vulnerabilities
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2018/Oct/11
Exploit
Mailing List
Third Party Advisory
https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10092
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/45533/
Exploit
Third Party Advisory
VDB Entry
https://www.secureauth.com/labs/advisories/d-link-central-wifimanager-software-controller-multiple-vulnerabilities
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dlink:central_wifimanager:*:*:*:*:*:*:*:*

Версия от 1.00 (включая) до 1.03 (исключая)

EPSS

Процентиль: 94%

0.15176

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-m8v4-m34m-jgj6

CVSS3: 9.8

github

больше 3 лет назад

BDU:2019-00026

CVSS3: 7.3

fstec

больше 7 лет назад

Уязвимость программного контроллера для централизованного управления беспроводными сетями D-Link Central WiFi Manager, связанная с использованием предустановленных учетных данных, позволяющая нарушителю выполнить произвольный PHP-код