Exploitation Summary
EIP tracks 3 public exploits for CVE-2013-10059.
PoCs published by Metasploit, m-1-k-3, including Metasploit module exploits/linux/http/dlink_dir615_up_exec.
AI-analyzed exploit summary This Metasploit module exploits an authenticated OS command injection vulnerability in D-Link DIR-615h routers. It leverages default credentials to inject commands via the `ping_ipaddr` parameter, enabling arbitrary payload execution through wget.
Description
An authenticated OS command injection vulnerability exists in various D-Link routers (tested on DIR-615H1 running firmware version 8.04) via the tools_vct.htm endpoint. The web interface fails to sanitize input passed from the ping_ipaddr parameter to the tools_vct.htm diagnostic interface, allowing attackers to inject arbitrary shell commands using backtick encapsulation. With default credentials, an attacker can exploit this blind injection vector to execute arbitrary commands.
Exploits (3)
This Metasploit module exploits an authenticated OS command injection vulnerability in D-Link DIR-615h routers. It leverages default credentials to inject commands via the `ping_ipaddr` parameter, enabling arbitrary payload execution through wget.
This exploit demonstrates an OS command injection vulnerability in D-Link DIR-615 routers via the `ping_ipaddr` parameter. It allows authenticated attackers to execute arbitrary shell commands, such as starting a telnet daemon or uploading a backdoor.
This Metasploit module exploits an authenticated OS command injection vulnerability in D-Link DIR-615 routers (CVE-2013-10059). It leverages default credentials to inject commands via the `ping_ipaddr` parameter, enabling arbitrary payload execution through wget.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H