Command Injection Vulnerability in D-Link DIR-816L Devices

CVE-2020-15893

Summary

The D-Link DIR-816L devices prior to version 1.10b04Beta02 are susceptible to a command injection vulnerability due to Universal Plug and Play (UPnP) being enabled by default on port 1900. An attacker could exploit this flaw by injecting a malicious payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet. This could potentially lead to unauthorized access or control over the affected device, compromising its integrity and security.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2020-15893
Created by Rapid7

References