This exploit allows an attacker to perform a Denial of Service attack on the Dlink DSL-2650U router. By sending a specially crafted request to the 'diagpppoe.cgi' script with a long string of characters, the router crashes and becomes unresponsive.
This Modem's Web Application suffers from Cross-site request forgery through which attacker can manipulate user data via sending him malicious craft url. The Modems's Application not using any security token to prevent it against CSRF. You can manipulate any userdata. PoC and Exploit to change user password:
This modem's web application suffers from Cross-site request forgery through which attacker can manipulate user data via sending him malicious craft url. The modem's application does not use any security token to prevent it against CSRF. The proof of concept (PoC) and exploit can be used to change the user password.
The DIR-601 firmware has a security issue that allows an attacker to exploit command injection in the ping functionality. The attacker needs to be logged in, and can execute the attack either from the wireless LAN or if the management interface is exposed on the Internet. XSRF can also be used to trick the administrator into exploiting the vulnerability.
There are 2 security issues in DIR-615 firmware which allows an attacker using XSRF attack to exploit buffer overflow vulnerabilities in ping and send email functionality.
Have come across 3 security issues in DIR-815 firmware which allows an attacker to exploit command injection and buffer overflows in authentication and HNAP functionality. All of them can be exploited by an unauthenticated attacker. The attacker can be on wireless LAN or WAN if mgmt interface is exposed to attack directly or using XSRF if not exposed.
Three security issues have been found in the DIR-818W firmware that allow an unauthenticated attacker to exploit command injection and buffer overflows in the authentication and HNAP functionalities. The attacker can be on the wireless LAN or WAN if the management interface is exposed to attack directly or using XSRF if not exposed.
Three security issues in DIR-815 firmware allow an unauthenticated attacker to exploit command injection and buffer overflows in authentication and HNAP functionality. The attacker can be on the wireless LAN or WAN if the management interface is exposed to attack directly or using XSRF if not exposed.
Several Dlink routers contain a pre-authentication stack buffer overflow vulnerability, which is exposed on the LAN interface on port 80. This vulnerability affects the HNAP SOAP protocol, which accepts arbitrarily long strings into certain XML parameters and then copies them into the stack. This exploit has been tested on the real devices DIR-818LW and 868L (rev. B), and it was tested using emulation on the DIR-822, 823, 880, 885, 890 and 895. Others might be affected, and this vulnerability is present in both MIPS and ARM devices. The MIPS devices are powered by Lextra RLX processors, which are crippled MIPS cores lacking a few load and store instructions. Because of this the payloads have to be sent unencoded, which can cause them to fail, although the bind shell seems to work well. For the ARM devices, the inline reverse tcp seems to work best. Check the reference links to see the vulnerable firmware versions.
Some DLINK Access Points are vulnerable to an authenticated OS command injection. Default credentials for the web interface are admin/admin.
Services By CQR