Multiple D-Link products, HNAP command, Remote Privilege Escalation Vulnerability

Multiple D-Link products, HNAP command, Remote Privilege Escalation Vulnerability
Multiple D-Link products, HNAP command, Remote Privilege Escalation Vulnerability

Release date:
Updated on:

Affected Systems:

D-Link Wireless Router

Description:

Bugtraq id: 74051

D-link focuses on the design and development of wireless networks and Ethernet hardware products.

Multiple D-Link products have the Remote Privilege Escalation Vulnerability in the implementation of HNAP commands. authenticated remote attackers can exploit this vulnerability to gain Elevation of Privilege.

<* Source: Zhang Wei (Qihoo360 ADLAB)
*>

Suggestion:

Vendor patch:

D-Link
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.dlink.com/

This article permanently updates the link address: