CVE-2020-27864

high · 8.8

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the Authorization request header, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-10880.

8.8

CVSS

10.1%

EPSS (exploit prob.)

96th

EPSS percentile

2021-02-12

Published

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-77

Affected products

Vendor	Product	Affected versions
dlink	dap-1860_firmware	<= 1.04b03
dlink	dap-1860	ax

Check a specific version with /api/v1/cve/match.

References

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10197
https://www.zerodayinitiative.com/advisories/ZDI-20-1428/
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10197
https://www.zerodayinitiative.com/advisories/ZDI-20-1428/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-27864