cbcvebase.
CVE-2019-13373
published 2019-07-06

CVE-2019-13373: An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. Input does not get validated and arbitrary SQL statements can be…

PriorityP178critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
68.02%
99.2th percentile
An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. Input does not get validated and arbitrary SQL statements can be executed in the database via the /web/Public/Conn.php parameter dbSQL.

Affected

1 ranges
VendorProductVersion rangeFixed in
dlinkcentral_wifimanager——

Detection & IOCsextracted from sources · hover to see the quote

path/web/Public/Conn.php↗
otherdbSQL↗
  • →Monitor for unauthenticated HTTP requests targeting the endpoint /web/Public/Conn.php with a 'dbSQL' parameter, which indicates exploitation of the exposed API for arbitrary SQL execution. ↗
  • →Alert on POST/GET requests to /web/Public/Conn.php containing SQL keywords (SELECT, INSERT, UPDATE, etc.) in the dbSQL parameter, as no authentication is required to reach this endpoint. ↗
  • ·The vulnerability only affects D-Link Central WiFi Manager CWM(100) versions prior to v1.03R0100_BETA6; patched versions are not affected. ↗

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.