D-Link DIR-816L/DIR-803 URL Encoding webinc/js/info.php Referer Header cross site scripting

Summaryinfo

A vulnerability classified as problematic has been found in D-Link DIR-816L and DIR-803. This impacts an unknown function of the file webinc/js/info.php of the component URL Encoding. Performing a manipulation as part of Referer Header results in cross site scripting. This vulnerability was named CVE-2020-25786. The attack may be initiated remotely. There is no available exploit. It is recommended that the affected component be replaced with an alternative.

Detailsinfo

A vulnerability, which was classified as problematic, was found in D-Link DIR-816L and DIR-803 (Router Operating System) (version now known). This affects some unknown processing of the file webinc/js/info.php of the component URL Encoding. The manipulation as part of a Referer Header leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. This is going to have an impact on integrity. The summary by CVE is:

** UNSUPPORTED WHEN ASSIGNED ** webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header.

The weakness was presented 09/19/2020. This vulnerability is uniquely identified as CVE-2020-25786 since 09/19/2020. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/04/2024). The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

By approaching the search of inurl:webinc/js/info.php it is possible to find vulnerable targets with Google Hacking.

The problem might be mitigated by replacing the product with as an alternative.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• D-Link

Name

• DIR-803
• DIR-816L

License

• commercial

Support

• end of life

Website

• Vendor: https://www.dlink.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion