Description
D-Link Central WiFi Manager CWM(100)中存在远程代码执行漏洞，该漏洞是由于对cookie username数据验证不当导致的。
D-Link Central WiFi Manager CWM100 username 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.rapid7.com/db/modules/exploit/windows/http/dlink_central_wifimanager_rce/
https://nvd.nist.gov/vuln/detail/cve-2019-13372
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dlink_central_wifimanager_rce.rb
https://cve.yack.one/products/dlink:central-wifimanager
https://db.gcve.eu/vuln/cve-2019-13372
https://securityvulnerability.io/vulnerability/CVE-2019-13372
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117
https://unh3x.github.io/2019/02/21/D-link-(CWM-100)-Multiple-Vulnerabilities/
https://packetstormsecurity.com/files/158904/D-Link-Central-WiFi-Manager-CWM-100-Remote-Code-Execution.html