CVE-2019-13374

概要

参考情報

• unh3x/unh3x.github.io
• supportannouncement.us.dlink.com/announcement/publication.aspx · Patch
• unh3x.github.io/2019/02/21/D-link-%28CWM-100%29-Multiple-Vulnerabilities

central wifimanager のその他の脆弱性

• CVE-2019-13375緊急 9.8A SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 in PayAction.class.php with the index.php/Pay…
• CVE-2019-13373緊急 9.8An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. Input does not get validated and arbitrary SQL …
• CVE-2019-13372緊急 9.8/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arb…
• CVE-2018-15517高 8.6The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but act…
• CVE-2018-15516中 5.8The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via p…