Detections
Analytics

D-Link DIR 850L Router Local File Inclusion

critical Nessus Plugin ID 103114

Language:

Synopsis

The remote router is affected by a local file inclusion vulnerability

Description

The remote D-Link DIR router is affected by a local file inclusion vulnerability that allows an attacker to execute arbitrary PHP scripts.

Solution

Upgrade to firmware 1.14B07 BETA or later

See Also

https://blogs.securiteam.com/index.php/archives/3310

Plugin Details

Severity: Critical

ID: 103114

File Name: dlink_dir_lfi.nasl

Version: 1.5

Type: remote

Family: CGI abuses

Published: 9/11/2017

Updated: 6/14/2018

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: installed_sw/DLink DIR

Exploited by Nessus: true

Patch Publication Date: 7/27/2017

Vulnerability Publication Date: 7/11/2017