D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test
Vulnerability Description
D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/Mail_Test' and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-25120
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- James Bercegay of GulfTech Research and Development
References
- https://www.exploit-db.com/exploits/43845
- https://qkl.seebug.org/vuldb/ssvid-97088
- https://www.dlink.com/al/sq/products/dns-343-sharecenter-4-bay-network-storage-enclosure
- https://github.com/jamesbercegay/advisories/blob/master/%5BGTSA-00128%5D%20D-Link%20DNS-343%20ShareCenter%201.05%20Remote%20Root.txt
- https://www.vulncheck.com/advisories/dlink-dns343-sharecenter-command-injection-via-goform-mail-test
More from D-Link
View All →Affected Vendor
D-Link
View all reports →