Description
D-LINK 中存在远程命令执行漏洞。该漏洞是由于应用程序对http请求中的参数 en 处理不当导致的。
D-LINK 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.nsfocus.net/router-vulnerability/
https://www.iotsec-zone.com/article/355
https://github.com/tzwlhack/Vulnerability/blob/main/D-link%20DSL-2888A%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20(CVE-2020-24581).md?ref=blog.xlab.qianxin.com
https://bbs.kanxue.com/thread-224917.htm
https://wlaq.ycit.edu.cn/info/1005/3741.htm
https://blog.csdn.net/qq_69775412/article/details/138335979
https://cloud.tencent.com/developer/article/1063226
https://foxcookie.github.io/2022/08/02/D-Link_DIR-830LA1%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://avd.aliyun.com/detail?id=AVD-2023-35723
https://jiwo.org/ken/detail.php?id=2784
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10411
https://www.fortinet.com/blog/threat-research/d-link-routers-found-vulnerable-rce
https://nvd.nist.gov/vuln/detail/cve-2021-45382
https://fieldeffect.com/blog/legacy-d-link-routers-exploited-via-unauthenticated-dns-hijacking
https://app.opencve.io/cve/?vendor=d-link
https://www.rapid7.com/db/modules/exploit/linux/upnp/dlink_upnp_msearch_exec/
https://unit42.paloaltonetworks.com/6-new-vulnerabilities-found-on-home-routers/
https://www.tenable.com/plugins/nessus/84086
https://www.exploit-db.com/exploits/51243