Evil-DB LogoEvil-DB
← All CVEs

CVE-2018-19300

critical · 9.8

On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well.

9.8
CVSS
74.3%
EPSS (exploit prob.)
99th
EPSS percentile
2019-04-11
Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
d-linkdap-1530_firmware<= 1.05
dlinkdap-1530all versions
d-linkdap-1610_firmware<= 1.05
dlinkdap-1610all versions
dlinkdwr-111_firmware<= 1.01
dlinkdwr-111all versions
d-linkdwr-116_firmware1.06
d-linkdwr-116_firmware1.06
dlinkdwr-116_firmware<= 1.05
dlinkdwr-116all versions
dlinkdwr-512_firmware<= 2.02
dlinkdwr-512all versions
d-linkdwr-711_firmware<= 1.11
dlinkdwr-711all versions
dlinkdwr-712_firmware<= 2.02
dlinkdwr-712all versions
dlinkdwr-921_firmware<= 1.02
dlinkdwr-921all versions
dlinkdwr-921_firmware<= 2.02
dlinkdwr-921all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-19300