Command Injection in D-Link DIR-868L Rev.B Devices

CVE-2018-19988

Summary

A vulnerability exists in D-Link DIR-868L Rev.B devices due to the improper handling of parameters within the /HNAP1/SetClientInfoDemo message. Specifically, the AudioMute and AudioEnable parameters can be exploited as they are stored without sufficient validation in the ShellPath script file. This lack of regex checking enables an attacker to manipulate the parameters, leading to potential command injection vulnerabilities. By leveraging specially crafted XML messages containing single quotes or backquotes, an attacker could execute arbitrary commands on the device, risking unauthorized access and control.

References