CVE-2019-13372

概要

参考情報

• packetstormsecurity.com/files/158904/D-Link-Central-WiFi-Manager-CWM-100-Remote-Code-Execution.html · Exploit
• unh3x/unh3x.github.io
• supportannouncement.us.dlink.com/announcement/publication.aspx · Third Party Advisory
• unh3x.github.io/2019/02/21/D-link-%28CWM-100%29-Multiple-Vulnerabilities

central wifimanager のその他の脆弱性

• CVE-2019-13375緊急 9.8A SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 in PayAction.class.php with the index.php/Pay…
• CVE-2019-13374中 6.1A cross-site scripting (XSS) vulnerability in resource view in PayAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100…
• CVE-2019-13373緊急 9.8An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. Input does not get validated and arbitrary SQL …
• CVE-2018-15517高 8.6The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but act…
• CVE-2018-15516中 5.8The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via p…