CVE-2013-7471: Command Injection
An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7471?
The severity of CVE-2013-7471 is critical with a severity value of 9.8.
Which D-Link devices are affected by CVE-2013-7471?
D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices are affected by CVE-2013-7471.
What is the vulnerability in CVE-2013-7471?
The vulnerability in CVE-2013-7471 is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element in soap.cgi?service=WANIPConn1.
How can I fix CVE-2013-7471?
To fix CVE-2013-7471, update your D-Link DIR-845 to v1.02b03, DIR-600 to v2.17b01, DIR-645 to v1.04b11, or DIR-300 rev. B or DIR-865 devices to the latest firmware version available.
Where can I find more information about CVE-2013-7471?
More information about CVE-2013-7471 can be found at the following references: http://www.s3cur1ty.de/m1adv2013-020, https://www.exploit-db.com/exploits/27044