CVE-2018-19300

high-risk
Published 2019-04-11

On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well.

Do I need to act?

!
23.3% chance of exploitation in next 30 days
EPSS score — higher than 77% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (10)

Affected Vendors

D-Link Dlink

References (8)

Exploit https://community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulner...
Vendor Advisory https://eu.dlink.com/de/de/support/support-news/2019/march/19/remote-command-exe...
Third Party Advisory https://www.greenbone.net/en/serious-vulnerability-discovered-in-d-link-routers/
Third Party Advisory https://www.greenbone.net/schwerwiegende-sicherheitsluecke-in-d-link-routern-ent...
Exploit https://community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulner...
Vendor Advisory https://eu.dlink.com/de/de/support/support-news/2019/march/19/remote-command-exe...
Third Party Advisory https://www.greenbone.net/en/serious-vulnerability-discovered-in-d-link-routers/
Third Party Advisory https://www.greenbone.net/schwerwiegende-sicherheitsluecke-in-d-link-routern-ent...
62
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 14/34 · Moderate
Exposure 16/34 · Moderate