CVE-2019-7389

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote attackers to reset the router without authentication via the SetFactoryDefault HNAP API. Consequently, an attacker can achieve a denial-of-service attack without authentication.

CVSS v3 7.5 HIGH
CVSS v2.0 7.8 HIGH

7.5^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/106853	Third Party Advisory
https://github.com/leonW7/D-Link/blob/master/Vul_4.md	Exploit Third Party Advisory
http://www.securityfocus.com/bid/106853	Third Party Advisory
https://github.com/leonW7/D-Link/blob/master/Vul_4.md	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:dlink:dir-823g_firmware:1.02b03:*:*:*:*:*:*:*

cpe:2.3:h:dlink:dir-823g:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-02-05 00:29

Updated : 2024-11-21 04:48

NVD link : CVE-2019-7389

Mitre link : CVE-2019-7389

CVE.ORG link : CVE-2019-7389

JSON object : View

Products Affected

dlink

dir-823g_firmware
dir-823g

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2019-7389", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-02-05T00:29:00.320", "references": [{"url": "http://www.securityfocus.com/bid/106853", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/leonW7/D-Link/blob/master/Vul_4.md", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/106853", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/leonW7/D-Link/blob/master/Vul_4.md", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote attackers to reset the router without authentication via the SetFactoryDefault HNAP API. Consequently, an attacker can achieve a denial-of-service attack without authentication."}, {"lang": "es", "value": "Se ha descubierto un problema en /bin/goahead en dispositivos D-Link DIR-823G con firmware en su versi\u00f3n 1.02B03. Hay un control de acceso incorrecto que permite que los atacantes remotos restablezcan el router sin autenticaci\u00f3n mediante la API HNAP SetFactoryDefault. En consecuencia, un atacante puede lograr una denegaci\u00f3n de servicio (DoS) sin autenticaci\u00f3n."}], "lastModified": "2024-11-21T04:48:07.693", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-823g_firmware:1.02b03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D25EA7A1-3406-41F7-A49A-6089BCEC6A7D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-823g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "67B980AA-84BE-4D22-B4E7-7B2DBF571B65"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}