Critical severity · published Sep 27, 2019
CVE-2019-16920
D-Link Multiple Routers Command Injection Vulnerability
In wildKEV
9.8
CVSS
100%
EPSS
Yes
On KEV
Description
Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)100.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 25, 2022
Federal remediation dueApr 15, 2022
Ransomware campaign useNot known
Affected products
Which versions
DF
Dap-1533 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dhp-1565 Firmware · Dlink
through 1.01 · source: NVD
DF
Dir-615 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dir-652 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dir-655 Firmware · Dlink
through 3.02b05 · source: NVD
DF
Dir-825 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dir-835 Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dir-855l Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dir-862l Firmware · Dlink
All versions, or not specified · source: NVD
DF
Dir-866l Firmware · Dlink
through 1.03b04 · source: NVD
MR
Multiple Routers · D-Link
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-16920
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-16920
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://fortiguard.com/zeroday/FG-VD-19-117
x_refsource_MISC
https://www.seebug.org/vuldb/ssvid-98079
x_refsource_MISC
https://medium.com/%4080vul/determine-the-device-model-affected-by-cve-2019-16920-by-zoomeye-bf6fec7f9bb3
third-party-advisory
https://www.kb.cert.org/vuls/id/766427