Multiple D-Link Products HNAP Command Remote Privilege Escalation Vulnerability
BID:74051
Info
Multiple D-Link Products HNAP Command Remote Privilege Escalation Vulnerability
| Bugtraq ID: | 74051 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 10 2015 12:00AM |
| Updated: | Apr 10 2015 12:00AM |
| Credit: | Zhang Wei (Qihoo360 ADLAB) |
| Vulnerable: |
D-Link DIR-890L A1 1.03b07 D-Link DIR-880L A1 1.02b13 D-Link DIR-868L A1 1.09B08 D-Link DIR-860L A1 1.08B02 D-Link DIR-850L B1 2.03B01 D-Link DIR-850L A1 1.12B05 D-Link DIR-820LW B1 2.01 D-Link DIR-818LW A1 1.04B03 D-Link DIR-817LW B1 1.03b05 D-Link DIR-816L A1 2.05B02 D-Link DIR-629 A1 1.01 |
| Not Vulnerable: |
D-Link DIR-890L A1 Patch 1.06B01 D-Link DIR-880L A1 Patch 1.03B11 |
Discussion
Multiple D-Link Products HNAP Command Remote Privilege Escalation Vulnerability
Multiple D-Link products are prone to a remote privilege-escalation vulnerability.
An authenticated attacker can exploit this issue to gain elevated privileges using arbitrary commands. This may aid in further attacks.
Multiple D-Link products are prone to a remote privilege-escalation vulnerability.
An authenticated attacker can exploit this issue to gain elevated privileges using arbitrary commands. This may aid in further attacks.
Solution / Fix
Multiple D-Link Products HNAP Command Remote Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.