Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-10069.
PoCs published by m-1-k-3, including Metasploit module auxiliary/admin/http/dlink_dir_300_600_exec_noauth.
AI-analyzed exploit summary This is a detailed vulnerability writeup for an unauthenticated OS command injection vulnerability in D-Link DIR-600 and DIR-300 routers. The vulnerability allows arbitrary command execution via the 'cmd' parameter in /command.php, enabling attackers to start a telnet server or extract credentials.
Description
The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root.
Exploits (2)
This is a detailed vulnerability writeup for an unauthenticated OS command injection vulnerability in D-Link DIR-600 and DIR-300 routers. The vulnerability allows arbitrary command execution via the 'cmd' parameter in /command.php, enabling attackers to start a telnet server or extract credentials.
This Metasploit module exploits an unauthenticated OS command injection vulnerability in D-Link DIR-600 and DIR-300 routers via the /command.php endpoint. It sends a POST request with a user-supplied command, which is executed on the target device.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H