WPSPIN Vulnerability in D-Link DIR-822 B1 Devices

CVE-2018-19990

Summary

In D-Link DIR-822 B1 devices, the WPSPIN parameter in the /HNAP1/SetWiFiVerifyAlpha message is exposed to vulnerabilities due to a lack of input validation. The parameter is stored in internal configuration memory without proper regex checks, exposing the system to potential command injection attacks. Specifically, the data can allow shell metacharacters in the WPSPIN element, which may be exploited through carefully crafted XML messages, potentially leading to unauthorized command execution and significant security breaches.

References