Vulnerability Details CVE-2018-6530
OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.943
EPSS Ranking 99.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Proposed Action
Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.
Ransomware Campaign
Known
Products affected by CVE-2018-6530
-
cpe:2.3:h:dlink:dir-860l:-
-
cpe:2.3:h:dlink:dir-865l:-
-
cpe:2.3:h:dlink:dir-868l:-
-
cpe:2.3:h:dlink:dir-880l:-
-
cpe:2.3:o:dlink:dir-860l_firmware:1.10b04
-
cpe:2.3:o:dlink:dir-860l_firmware:2.0.3
-
cpe:2.3:o:dlink:dir-860l_firmware:2.03.b03
-
cpe:2.3:o:dlink:dir-860l_firmware:a1_fw110b04
-
cpe:2.3:o:dlink:dir-865l_firmware:-
-
cpe:2.3:o:dlink:dir-865l_firmware:1.07b01
-
cpe:2.3:o:dlink:dir-865l_firmware:1.08b01
-
cpe:2.3:o:dlink:dir-865l_firmware:1.20b01
-
cpe:2.3:o:dlink:dir-865l_firmware:reva_firmware_patch_1.08.b01
-
cpe:2.3:o:dlink:dir-868l_firmware:-
-
cpe:2.3:o:dlink:dir-868l_firmware:1.10
-
cpe:2.3:o:dlink:dir-868l_firmware:1.12
-
cpe:2.3:o:dlink:dir-868l_firmware:1.12_eu_multi_20170316
-
cpe:2.3:o:dlink:dir-868l_firmware:1.12b04
-
cpe:2.3:o:dlink:dir-868l_firmware:2.00
-
cpe:2.3:o:dlink:dir-868l_firmware:2.01
-
cpe:2.3:o:dlink:dir-868l_firmware:2.03
-
cpe:2.3:o:dlink:dir-868l_firmware:2.05b02
-
cpe:2.3:o:dlink:dir-868l_firmware:3.00
-
cpe:2.3:o:dlink:dir-868l_firmware:3.01
-
cpe:2.3:o:dlink:dir-868l_firmware:a1_fw112b04
-
cpe:2.3:o:dlink:dir-880l_firmware:-
-
cpe:2.3:o:dlink:dir-880l_firmware:1.07
-
cpe:2.3:o:dlink:dir-880l_firmware:1.07.b08
-
cpe:2.3:o:dlink:dir-880l_firmware:1.08b04
-
cpe:2.3:o:dlink:dir-880l_firmware:1.20b01
-
cpe:2.3:o:dlink:dir-880l_firmware:1.20b01_01_i3se
-
cpe:2.3:o:dlink:dir-880l_firmware:reva_firmware_patch_1.08b04