CVE-2016-10178 - An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sb

CVE-2016-10178

Summary

An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command.

References

Vulnerable Configurations

cpe:2.3:o:dlink:dwr-932b_firmware:02.02eu:revb:*:*:*:*:*:*
cpe:2.3:o:dlink:dwr-932b_firmware:02.02eu:revb:*:*:*:*:*:*
cpe:2.3:h:dlink:dwr-932b:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dwr-932b:-:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	95877
misc	https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html

Last major update

23-04-2021 - 18:44

Published

30-01-2017 - 04:59

Last modified

23-04-2021 - 18:44