CVE-2018-10823
HIGH EXPLOITED IN THE WILD NUCLEID-Link DWR-116 < 1.06, DWR-512/DWR-712/DWR-912/DWR-921 < 2.02, DWR-111 < 1.01 - OS Command Injection via chkisg.htm
Title source: llmExploitation Summary
CVE-2018-10823 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including Blazej Adamczyk. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a shell command injection vulnerability in D-Link routers via the chkisg.htm page's Sip parameter. An authenticated attacker can execute arbitrary commands, such as reading the passwd file, by injecting shell commands into the URL.
Description
An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. An authenticated attacker may execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for full control over the device internals.
Exploits (1)
This exploit demonstrates a shell command injection vulnerability in D-Link routers via the chkisg.htm page's Sip parameter. An authenticated attacker can execute arbitrary commands, such as reading the passwd file, by injecting shell commands into the URL.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H