CVE-2021-45382 PoC — 多款D-Link产品操作系统命令注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45382.yaml

Associated Vulnerability

Title:多款D-Link产品操作系统命令注入漏洞 (CVE-2021-45382)
Description:D-Link DIR-820L等都是中国友讯（D-Link）公司的产品。D-Link DIR-820L是一款双频无线路由器。D-Link Dir-830L是一款无线 Ac1200 双频云路由器。D-Link Dir-810L是一款无线 Ac750 双频云路由器。多款 D-link 设备中存在操作系统命令注入漏洞，该漏洞源于产品ncc2文件中的DDNS函数存在错误。攻击者可通过该漏洞导致代码执行。所有系列H W修订版D-link DIR-810L、DIR-820L LW、DIR-826L、DIR-830

Description

A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file

File Snapshot


 id: CVE-2021-45382

info:
  name: D-Link - Remote Command Execution
  author: king-alexander
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!