CVE-2013-5946
19.12.2013, 04:24
The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "Ping or Trace an IP Address" or (2) "Perform a DNS Lookup" section.
| Vendor | Product | Version |
|---|---|---|
| dlink | dsr-500_firmware | 𝑥 ≤ 1.08b51 |
| dlink | dsr-500_firmware | 1.02b11:b11 |
| dlink | dsr-500_firmware | 1.02b25:b25 |
| dlink | dsr-500_firmware | 1.03b12:b12 |
| dlink | dsr-500_firmware | 1.03b23:b23 |
| dlink | dsr-500_firmware | 1.03b27:b27 |
| dlink | dsr-500_firmware | 1.03b36:b36 |
| dlink | dsr-500_firmware | 1.03b43:b43 |
| dlink | dsr-500_firmware | 1.04b58:b58 |
| dlink | dsr-500_firmware | 1.06b43:b43 |
| dlink | dsr-500_firmware | 1.06b53:b53 |
| dlink | dsr-500 | - |
| dlink | dsr-150n_firmware | 𝑥 ≤ 1.05b48 |
| dlink | dsr-150n | - |
| dlink | dsr-250n_firmware | 𝑥 ≤ 1.08b39 |
| dlink | dsr-250n_firmware | 1.01b46:b46 |
| dlink | dsr-250n_firmware | 1.01b56:b56 |
| dlink | dsr-250n_firmware | 1.05b20:b20 |
| dlink | dsr-250n_firmware | 1.05b53:b53 |
| dlink | dsr-250n_firmware | 1.08b31:b31 |
| dlink | dsr-1000_firmware | 𝑥 ≤ 1.08b51 |
| dlink | dsr-1000_firmware | 1.01b50:b50 |
| dlink | dsr-1000_firmware | 1.02b11:b11 |
| dlink | dsr-1000_firmware | 1.02b25:b25 |
| dlink | dsr-1000_firmware | 1.03b12:b12 |
| dlink | dsr-1000_firmware | 1.03b23:b23 |
| dlink | dsr-1000_firmware | 1.03b27:b27 |
| dlink | dsr-1000_firmware | 1.03b36:b36 |
| dlink | dsr-1000_firmware | 1.03b43:b43 |
| dlink | dsr-1000_firmware | 1.04b58:b58 |
| dlink | dsr-1000_firmware | 1.06b43:b43 |
| dlink | dsr-1000_firmware | 1.06b53:b53 |
| dlink | dsr-1000 | - |
| dlink | dsr-150_firmware | 𝑥 ≤ 1.08b29 |
| dlink | dsr-150_firmware | 1.05b29:b29 |
| dlink | dsr-150_firmware | 1.05b35:b35 |
| dlink | dsr-150_firmware | 1.05b46:b46 |
| dlink | dsr-150_firmware | 1.05b50:b50 |
| dlink | dsr-150 | - |
| dlink | dsr-250_firmware | 𝑥 ≤ 1.08b39 |
| dlink | dsr-250_firmware | 1.01b46:b46 |
| dlink | dsr-250_firmware | 1.01b56:b56 |
| dlink | dsr-250_firmware | 1.05b20:b20 |
| dlink | dsr-250_firmware | 1.05b53:b53 |
| dlink | dsr-250_firmware | 1.08b31:b31 |
| dlink | dsr-250 | - |
| dlink | dsr-1000n_firmware | 𝑥 ≤ 1.08b51 |
| dlink | dsr-1000n_firmware | 1.01b50:b50 |
| dlink | dsr-1000n_firmware | 1.02b11:b11 |
| dlink | dsr-1000n_firmware | 1.02b25:b25 |
| dlink | dsr-1000n_firmware | 1.03b12:b12 |
| dlink | dsr-1000n_firmware | 1.03b23:b23 |
| dlink | dsr-1000n_firmware | 1.03b27:b27 |
| dlink | dsr-1000n_firmware | 1.03b36:b36 |
| dlink | dsr-1000n_firmware | 1.03b43:b43 |
| dlink | dsr-1000n_firmware | 1.04b58:b58 |
| dlink | dsr-1000n_firmware | 1.06b43:b43 |
| dlink | dsr-1000n_firmware | 1.06b53:b53 |
| dlink | dsr-1000n | - |
| dlink | dsr-500n_firmware | 𝑥 ≤ 1.08b51 |
| dlink | dsr-500n_firmware | 1.02b11:b11 |
| dlink | dsr-500n_firmware | 1.02b25:b25 |
| dlink | dsr-500n_firmware | 1.03b12:b12 |
| dlink | dsr-500n_firmware | 1.03b23:b23 |
| dlink | dsr-500n_firmware | 1.03b27:b27 |
| dlink | dsr-500n_firmware | 1.03b36:b36 |
| dlink | dsr-500n_firmware | 1.03b43:b43 |
| dlink | dsr-500n_firmware | 1.04b58:b58 |
| dlink | dsr-500n_firmware | 1.06b43:b43 |
| dlink | dsr-500n_firmware | 1.06b53:b53 |
| dlink | dsr-500n | - |
𝑥
= Vulnerable software versions
References