Main Vulnerability Database Vulnerabilities #VU67064

OS Command Injection in D-Link products - CVE-2018-6530

Published: September 7, 2022 / Updated: September 7, 2022

Vulnerability identifier: #VU67064

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-6530

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation in the service parameter within the soap.cgi (soapcgi_main in cgibin). A remote unauthenticated attacker can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

DIR-880L
DIR-868L
DIR-860L
Dir-865L

How to mitigate CVE-2018-6530

Install update from vendor's website.

DIR-880L - update to 1.08B06
DIR-868L - update to 1.20B01
DIR-860L - update to 1.11B01
Dir-865L - update to 1.10B01

External References

Related Security Bulletins

OS Command Injection in D-Link Routers