CVE-2019-13372
CRITICAL EXPLOITED IN THE WILD NUCLEID-Link Central WiFi Manager < 1.03 - Unauthenticated Remote Code Execution via Cookie Injection
Title source: llmExploitation Summary
CVE-2019-13372 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 1 public exploit from researchers including M3@ZionLab from DBAppSecurity, including a Metasploit module exploits/windows/http/dlink_central_wifimanager_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits a PHP code injection vulnerability in D-Link Central WiFi Manager CWM(100) by injecting malicious PHP code via the username cookie, which is passed unsanitized to eval(). It achieves remote code execution (RCE) on vulnerable versions.
Description
/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication.
Exploits (1)
This Metasploit module exploits a PHP code injection vulnerability in D-Link Central WiFi Manager CWM(100) by injecting malicious PHP code via the username cookie, which is passed unsanitized to eval(). It achieves remote code execution (RCE) on vulnerable versions.
Nuclei Templates (1)
html:"D-Link Central WiFiManager"
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H