Lucene search

[email protected]CVE-2013-5946

HistoryDec 19, 2013 - 4:24 a.m.

CVE-2013-5946

2013-12-1904:24:51

CWE-78

[email protected]

web.nvd.nist.gov

d-link

firmware

vulnerability

remote execution

cve-2013-5946

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.7 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.6%

JSON

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) “Ping or Trace an IP Address” or (2) “Perform a DNS Lookup” section.

Affected configurations

NVD

Node

dlinkdsr-500_firmwareRange≤1.08b51

dlinkdsr-500_firmwareMatch1.02b11

dlinkdsr-500_firmwareMatch1.02b25

dlinkdsr-500_firmwareMatch1.03b12

dlinkdsr-500_firmwareMatch1.03b23

dlinkdsr-500_firmwareMatch1.03b27

dlinkdsr-500_firmwareMatch1.03b36

dlinkdsr-500_firmwareMatch1.03b43

dlinkdsr-500_firmwareMatch1.04b58

dlinkdsr-500_firmwareMatch1.06b43

dlinkdsr-500_firmwareMatch1.06b53

AND

dlinkdsr-500Match-

Node

dlinkdsr-150n_firmwareRange≤1.05b48

AND

dlinkdsr-150nMatch-

Node

dlinkdsr-250n_firmwareRange≤1.08b39

dlinkdsr-250n_firmwareMatch1.01b46

dlinkdsr-250n_firmwareMatch1.01b56

dlinkdsr-250n_firmwareMatch1.05b20

dlinkdsr-250n_firmwareMatch1.05b53

dlinkdsr-250n_firmwareMatch1.08b31

AND

dlinkdsr-250nMatch-

Node

dlinkdsr-1000_firmwareRange≤1.08b51

dlinkdsr-1000_firmwareMatch1.01b50

dlinkdsr-1000_firmwareMatch1.02b11

dlinkdsr-1000_firmwareMatch1.02b25

dlinkdsr-1000_firmwareMatch1.03b12

dlinkdsr-1000_firmwareMatch1.03b23

dlinkdsr-1000_firmwareMatch1.03b27

dlinkdsr-1000_firmwareMatch1.03b36

dlinkdsr-1000_firmwareMatch1.03b43

dlinkdsr-1000_firmwareMatch1.04b58

dlinkdsr-1000_firmwareMatch1.06b43

dlinkdsr-1000_firmwareMatch1.06b53

AND

dlinkdsr-1000Match-

Node

dlinkdsr-150_firmwareRange≤1.08b29

dlinkdsr-150_firmwareMatch1.05b29

dlinkdsr-150_firmwareMatch1.05b35

dlinkdsr-150_firmwareMatch1.05b46

dlinkdsr-150_firmwareMatch1.05b50

AND

dlinkdsr-150Match-

Node

dlinkdsr-250_firmwareRange≤1.08b39

dlinkdsr-250_firmwareMatch1.01b46

dlinkdsr-250_firmwareMatch1.01b56

dlinkdsr-250_firmwareMatch1.05b20

dlinkdsr-250_firmwareMatch1.05b53

dlinkdsr-250_firmwareMatch1.08b31

AND

dlinkdsr-250Match-

Node

dlinkdsr-1000n_firmwareRange≤1.08b51

dlinkdsr-1000n_firmwareMatch1.01b50

dlinkdsr-1000n_firmwareMatch1.02b11

dlinkdsr-1000n_firmwareMatch1.02b25

dlinkdsr-1000n_firmwareMatch1.03b12

dlinkdsr-1000n_firmwareMatch1.03b23

dlinkdsr-1000n_firmwareMatch1.03b27

dlinkdsr-1000n_firmwareMatch1.03b36

dlinkdsr-1000n_firmwareMatch1.03b43

dlinkdsr-1000n_firmwareMatch1.04b58

dlinkdsr-1000n_firmwareMatch1.06b43

dlinkdsr-1000n_firmwareMatch1.06b53

AND

dlinkdsr-1000nMatch-

Node

dlinkdsr-500n_firmwareRange≤1.08b51

dlinkdsr-500n_firmwareMatch1.02b11

dlinkdsr-500n_firmwareMatch1.02b25

dlinkdsr-500n_firmwareMatch1.03b12

dlinkdsr-500n_firmwareMatch1.03b23

dlinkdsr-500n_firmwareMatch1.03b27

dlinkdsr-500n_firmwareMatch1.03b36

dlinkdsr-500n_firmwareMatch1.03b43

dlinkdsr-500n_firmwareMatch1.04b58

dlinkdsr-500n_firmwareMatch1.06b43

dlinkdsr-500n_firmwareMatch1.06b53

AND

dlinkdsr-500nMatch-

CPENameOperatorVersion
dlink:dsr-500_firmwaredlink dsr-500 firmwarele1.08b51
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.02b11
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.02b25
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b12
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b23
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b27
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b36
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.03b43
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.04b58
dlink:dsr-500_firmwaredlink dsr-500 firmwareeq1.06b43

CPE	Name	Operator	Version
dlink:dsr-500_firmware	dlink dsr-500 firmware	le	1.08b51
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.02b11
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.02b25
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b12
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b23
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b27
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b36
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.03b43
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.04b58
dlink:dsr-500_firmware	dlink dsr-500 firmware	eq	1.06b43