D-Link DIR-825AC G1 ARP Broadcast access control

Summaryinfo

A vulnerability identified as critical has been detected in D-Link DIR-825AC G1. Affected by this issue is some unknown functionality of the component ARP Handler. The manipulation as part of Broadcast leads to access control. This vulnerability is listed as CVE-2019-13265. The attack must be carried out from within the local network. There is no available exploit. It is recommended to apply restrictive firewalling.

Detailsinfo

A vulnerability, which was classified as critical, has been found in D-Link DIR-825AC G1 (Router Operating System) (affected version not known). This issue affects some unknown functionality of the component ARP Handler. The manipulation as part of a Broadcast leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert channel, the sender can trivially issue an ARP request to an arbitrary computer on the network. (In general, some routers restrict ARP forwarding only to requests destined for the network's subnet mask, but these routers did not restrict this traffic in any way. Depending on this factor, one must use either the lower 8 bits of the IP address, or the entire 32 bits, as the data payload.)

The weakness was presented 08/27/2019. The identification of this vulnerability is CVE-2019-13265 since 07/04/2019. The exploitation is known to be easy. The attack can only be initiated within the local network. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 12/07/2023). MITRE ATT&CK project uses the attack technique T1068 for this issue.

Addressing this vulnerability is possible by firewalling .

See VDB-140932 and VDB-140931 for similar entries. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Router Operating System

Vendor

• D-Link

Name

• DIR-825AC G1

License

• commercial

Website

• Vendor: https://www.dlink.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion