CVE-2013-5945 - CVE House

Back to Database

Status published Critical CVE-2013-5945

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before...

9.8 CVSS

Vulnerability Description

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allow remote attackers to execute arbitrary SQL commands via the password to (1) the login.authenticate function in share/lua/5.1/teamf1lualib/login.lua or (2) captivePortal.lua.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-5945

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from dlink

View All →

D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability...

D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability...

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows...

D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection...

D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection...

Affected Vendor

dlink

View all reports →

Affected Software

dsr-150 firmware, dsr-150n firmware, dsr-250 firmware, dsr-250n firmware, dsr-500 firmware, dsr-500n firmware, dsr-1000 firmware, dsr-1000n firmware

Vulnerable Versions:

0

Timeline

Official Publish: February 11th, 2020

Last Modified: August 6th, 2024

Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.