Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2019-13481

Description

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MTU field to SetWanSettings.

POC

Reference

- https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-3.pdf

Github

No PoCs found on GitHub currently.