| शीर्षक | D-Link DIR-860L Rev.B 2.04.B04 Command Injection |
|---|
| विवरण | A critical unauthenticated command injection vulnerability was discovered in the firmware of the D-Link DIR-860L router. The vulnerability exists within the device's SSDP (Simple Service Discovery Protocol) service and allows a remote attacker to execute arbitrary system commands on a target device by sending a specially crafted M-SEARCH network packet.
The root cause of the vulnerability is that the application directly takes the value of the ST (Search Target) header from an SSDP request and concatenates it into a string that is passed to the system() function, without proper validation or sanitization. An attacker can exploit this flaw by injecting shell metacharacters (such as a semicolon) into the ST header to append and execute arbitrary commands, leading to remote code execution. |
|---|
| स्रोत | ⚠️ https://github.com/i-Corner/cve/issues/17 |
|---|
| उपयोगकर्ता | iC0rner (UID 82839) |
|---|
| सबमिशन | 06/08/2025 08:29 PM (1 वर्ष पहले) |
|---|
| संयम | 14/08/2025 09:15 AM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 320091 [D-Link DIR-860L 2.04.B04 Simple Service Discovery Protocol htdocs/cgibin ssdpcgi_main अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|