Command Injection Vulnerability in D-Link DIR-600 Router

CVE-2023-33625

Summary

The D-Link DIR-600 router, specifically Hardware Version B5 with Firmware Version 2.18, is affected by a command injection vulnerability. This flaw occurs through the ST parameter in the lxmldbc_system() function, which can allow an attacker to execute arbitrary commands on the router. Exploiting this vulnerability can lead to unauthorized access to the device, potentially compromising the entire network. Users are advised to review the available security updates and follow best practices for device configuration to mitigate risks.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2023-33625
Created by Rapid7

References