Detections
Analytics

D-Link DIR 850L Router Local File Inclusion

critical Nessus Plugin ID 103114

Language:

Synopsis

The remote router is affected by a local file inclusion vulnerability

Description

The remote D-Link DIR router is affected by a local file inclusion vulnerability that allows an attacker to execute arbitrary PHP scripts.

Solution

Upgrade to firmware 1.14B07 BETA or later

See Also

https://blogs.securiteam.com/index.php/archives/3310

Plugin Details

Severity: Critical

ID: 103114

File Name: dlink_dir_lfi.nasl

Version: 1.5

Type: remote

Family: CGI abuses

Published: 9/11/2017

Updated: 6/14/2018

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 10

Temporal Score: 9.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:X

Vulnerability Information

Required KB Items: installed_sw/DLink DIR

Exploited by Nessus: true

Patch Publication Date: 7/27/2017

Vulnerability Publication Date: 7/11/2017