Details of VAR-201905-1161

ID

VAR-201905-1161

CVE

CVE-2018-19990

TITLE

D-Link DIR-822 Command injection vulnerability in devices

Trust: 0.8

sources: JVNDB: JVNDB-2018-015432

DESCRIPTION

In the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devices. In the SetWiFiVerifyAlpha.php source code, the WPSPIN parameter is saved in the $rphyinf1."/media/wps/enrollee/pin" and $rphyinf2."/media/wps/enrollee/pin" and $rphyinf3."/media/wps/enrollee/pin" internal configuration memory without any regex checking. And in the do_wps function of the wps.php source code, the data in $rphyinf3."/media/wps/enrollee/pin" is used with the wpatalk command without any regex checking. A vulnerable /HNAP1/SetWiFiVerifyAlpha XML message could have shell metacharacters in the WPSPIN element such as the `telnetd` string. D-Link DIR-822 The device contains a command injection vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. D-Link DIR-822 is a wireless router produced by Taiwan D-Link Company. The vulnerability stems from the fact that the network system or product does not correctly filter special characters, commands, etc. in the process of constructing executable commands of the operating system from external input data. Attackers can exploit this vulnerability to execute illegal operating system commands

Trust: 1.8

sources: NVD: CVE-2018-19990 // JVNDB: JVNDB-2018-015432 // VULHUB: VHN-130705 // VULMON: CVE-2018-19990

AFFECTED PRODUCTS

vendor:	d link	model:	dir-822	scope:	eq	version:	202krb06	Trust: 1.0
vendor:	d link	model:	dir-822	scope:	eq	version:	b1 202krb06	Trust: 0.8

sources: JVNDB: JVNDB-2018-015432 // NVD: CVE-2018-19990

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-19990
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2018-19990
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-201905-313
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-130705
value:	HIGH
Trust: 0.1
VULMON:	CVE-2018-19990
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2018-19990
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-130705
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-19990
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-130705 // VULMON: CVE-2018-19990 // JVNDB: JVNDB-2018-015432 // CNNVD: CNNVD-201905-313 // NVD: CVE-2018-19990

PROBLEMTYPE DATA

problemtype:	CWE-78	Trust: 1.1
problemtype:	CWE-77	Trust: 0.9

sources: VULHUB: VHN-130705 // JVNDB: JVNDB-2018-015432 // NVD: CVE-2018-19990

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201905-313

TYPE

operating system commend injection

Trust: 0.6

sources: CNNVD: CNNVD-201905-313

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-015432

PATCH

title:	DIR-822	url:	http://www.mydlink.co.kr/2013/beta_board/product_detail.php?no=205&model=DIR-822	Trust: 0.8
title:	FirmAE	url:	https://github.com/pr0v3rbs/FirmAE	Trust: 0.1
title:	-	url:	https://github.com/sinword/FirmAE_Connlab	Trust: 0.1

sources: VULMON: CVE-2018-19990 // JVNDB: JVNDB-2018-015432

EXTERNAL IDS

db:	NVD	id:	CVE-2018-19990	Trust: 2.6
db:	JVNDB	id:	JVNDB-2018-015432	Trust: 0.8
db:	CNNVD	id:	CNNVD-201905-313	Trust: 0.7
db:	VULHUB	id:	VHN-130705	Trust: 0.1
db:	VULMON	id:	CVE-2018-19990	Trust: 0.1

sources: VULHUB: VHN-130705 // VULMON: CVE-2018-19990 // JVNDB: JVNDB-2018-015432 // CNNVD: CNNVD-201905-313 // NVD: CVE-2018-19990

REFERENCES

url:	https://github.com/pr0v3rbs/cve/tree/master/cve-2018-19986%20-%2019990	Trust: 2.6
url:	https://nvd.nist.gov/vuln/detail/cve-2018-19990	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-19990	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/78.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://github.com/pr0v3rbs/firmae	Trust: 0.1

sources: VULHUB: VHN-130705 // VULMON: CVE-2018-19990 // JVNDB: JVNDB-2018-015432 // CNNVD: CNNVD-201905-313 // NVD: CVE-2018-19990

SOURCES

db:	VULHUB	id:	VHN-130705
db:	VULMON	id:	CVE-2018-19990
db:	JVNDB	id:	JVNDB-2018-015432
db:	CNNVD	id:	CNNVD-201905-313
db:	NVD	id:	CVE-2018-19990

LAST UPDATE DATE

2024-11-23T21:37:16.424000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-130705	date:	2019-10-03T00:00:00
db:	VULMON	id:	CVE-2018-19990	date:	2023-04-26T00:00:00
db:	JVNDB	id:	JVNDB-2018-015432	date:	2019-06-04T00:00:00
db:	CNNVD	id:	CNNVD-201905-313	date:	2020-05-22T00:00:00
db:	NVD	id:	CVE-2018-19990	date:	2024-11-21T03:58:57.253

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-130705	date:	2019-05-13T00:00:00
db:	VULMON	id:	CVE-2018-19990	date:	2019-05-13T00:00:00
db:	JVNDB	id:	JVNDB-2018-015432	date:	2019-06-04T00:00:00
db:	CNNVD	id:	CNNVD-201905-313	date:	2019-05-13T00:00:00
db:	NVD	id:	CVE-2018-19990	date:	2019-05-13T14:29:01.393