| 제목 | D-Link DIR852 1.00 Command Injection |
|---|
| 설명 | A critical command injection vulnerability exists in the HNAP (Home Network Administration Protocol) service of D-Link DIR-852 routers (Firmware Version 1.00). The flaw resides in the hnap_main function, which processes HNAP requests. An unauthenticated attacker can exploit this by sending a specially crafted HTTP request with a malicious SOAPAction header, leading to arbitrary command execution with root privileges. |
|---|
| 원천 | ⚠️ https://github.com/YZS17/CVE/blob/main/DLink/DLink-DIR852/RCE1.md |
|---|
| 사용자 | XU17 (UID 83703) |
|---|
| 제출 | 2025. 11. 10. AM 02:01 (11 개월 ago) |
|---|
| 모더레이션 | 2025. 11. 17. PM 06:24 (8 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 327605 [D-Link DIR-852 까지 20251002 /HNAP1/ 권한 상승] |
|---|
| 포인트들 | 0 |
|---|