CVE-2019-17621: D-Link DIR-859 Router Command Execution Vulnerability
First published: Mon Dec 30 2019(Updated: )
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-Link DIR-859 | ||
| All of | ||
| Any of | ||
| D-Link DIR-859 | <=1.05b03 | |
| D-Link DIR-859 | =1.06b01-beta1 | |
| D-Link DIR-859 | ||
| All of | ||
| D-Link DIR-822 firmware | <=2.03b01 | |
| D-Link DIR-822 | ||
| All of | ||
| D-Link DIR-822 firmware | <=3.12b04 | |
| D-Link DIR-822 | ||
| All of | ||
| Any of | ||
| D-Link DIR-823 Firmware | <=1.00b06 | |
| D-Link DIR-823 Firmware | =1.00b06-beta | |
| D-Link DIR-823 Firmware | ||
| All of | ||
| D-Link DIR-865L Firmware | <=1.07b01 | |
| D-Link DIR-865L | ||
| All of | ||
| D-Link DIR-868L Firmware | <=1.12b04 | |
| D-Link DIR-868LW | ||
| All of | ||
| D-Link DIR-868L Firmware | <=2.05b02 | |
| D-Link DIR-868LW | ||
| All of | ||
| Any of | ||
| D-Link DIR-869 | <=1.03b02 | |
| D-Link DIR-869 | =1.03b02-beta02 | |
| D-Link DIR-869AX | ||
| All of | ||
| D-Link DIR-880L Firmware | <=1.08b04 | |
| D-Link DIR-880L Firmware | ||
| All of | ||
| Any of | ||
| D-Link DIR-890L Firmware | <=1.11b01 | |
| D-Link DIR-890L Firmware | =1.11b01-beta01 | |
| D-Link DIR-890L Firmware | ||
| All of | ||
| Any of | ||
| D-Link DIR-890R Firmware | <=1.11b01 | |
| D-Link DIR-890R Firmware | =1.11b01-beta01 | |
| D-Link DIR-890R | ||
| All of | ||
| D-Link DIR-885L Firmware | <=1.12b05 | |
| Dlink DIR-885L MFC | ||
| All of | ||
| D-Link DIR-885R Firmware | <=1.12b05 | |
| D-Link DIR-885R | ||
| All of | ||
| D-Link DIR-895L Firmware | <=1.12b10 | |
| D-Link DIR-895L Firmware | ||
| All of | ||
| D-Link DIR-895R Firmware | <=1.12b10 | |
| D-Link DIR-895R | ||
| All of | ||
| D-Link DIR-818L Firmware | ||
| D-Link DIR-818L Firmware | ||
| D-Link DIR-859 | <=1.05b03 | |
| D-Link DIR-859 | =1.06b01-beta1 | |
| D-Link DIR-859 | ||
| D-Link DIR-822 firmware | <=2.03b01 | |
| D-Link DIR-822 | ||
| D-Link DIR-822 firmware | <=3.12b04 | |
| D-Link DIR-823 Firmware | <=1.00b06 | |
| D-Link DIR-823 Firmware | =1.00b06-beta | |
| D-Link DIR-823 Firmware | ||
| D-Link DIR-865L Firmware | <=1.07b01 | |
| D-Link DIR-865L | ||
| D-Link DIR-868L Firmware | <=1.12b04 | |
| D-Link DIR-868LW | ||
| D-Link DIR-868L Firmware | <=2.05b02 | |
| D-Link DIR-869 | <=1.03b02 | |
| D-Link DIR-869 | =1.03b02-beta02 | |
| D-Link DIR-869AX | ||
| D-Link DIR-880L Firmware | <=1.08b04 | |
| D-Link DIR-880L Firmware | ||
| D-Link DIR-890L Firmware | <=1.11b01 | |
| D-Link DIR-890L Firmware | =1.11b01-beta01 | |
| D-Link DIR-890L Firmware | ||
| D-Link DIR-890R Firmware | <=1.11b01 | |
| D-Link DIR-890R Firmware | =1.11b01-beta01 | |
| D-Link DIR-890R | ||
| D-Link DIR-885L Firmware | <=1.12b05 | |
| Dlink DIR-885L MFC | ||
| D-Link DIR-885R Firmware | <=1.12b05 | |
| D-Link DIR-885R | ||
| D-Link DIR-895L Firmware | <=1.12b10 | |
| D-Link DIR-895L Firmware | ||
| D-Link DIR-895R Firmware | <=1.12b10 | |
| D-Link DIR-895R | ||
| D-Link DIR-818L Firmware | ||
| D-Link DIR-818L Firmware |
Remedy
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/156054/D-Link-DIR-859-Unauthenticated-Remote-Command-Execution.html
- https://medium.com/@s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104
- https://medium.com/@s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147
- https://www.dlink.com/en/security-bulletin
- https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf
- https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104
- https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-es-fad716629ff9
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147;
- https://nvd.nist.gov/vuln/detail/CVE-2019-17621
Frequently Asked Questions
What is CVE-2019-17621?
CVE-2019-17621 is a command execution vulnerability in the D-Link DIR-859 Router.
What is the severity of CVE-2019-17621?
CVE-2019-17621 has a severity rating of 9.8, which is considered critical.
How does the CVE-2019-17621 vulnerability affect D-Link DIR-859 Router?
The CVE-2019-17621 vulnerability allows an unauthenticated remote attacker to execute system commands as root on the D-Link DIR-859 Router.
Is D-Link DIR-859 Router the only affected software?
No, other versions of the D-Link firmware may also be affected by the CVE-2019-17621 vulnerability.
How can I fix the CVE-2019-17621 vulnerability?
To fix the CVE-2019-17621 vulnerability, you should update your D-Link DIR-859 Router firmware to the latest version available.
- agent/type
- agent/description
- agent/weakness
- agent/severity
- agent/remedy
- agent/title
- agent/author
- agent/first-publish-date
- agent/references
- agent/event
- agent/source
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- collector/nvd-index
- vendor/d-link
- canonical/d-link dir-859
- vendor/dlink
- version/d-link dir-859/1.05b03
- version/d-link dir-859/1.06b01-beta1
- canonical/d-link dir-822 firmware
- version/d-link dir-822 firmware/2.03b01
- canonical/d-link dir-822
- version/d-link dir-822 firmware/3.12b04
- canonical/d-link dir-823 firmware
- version/d-link dir-823 firmware/1.00b06
- version/d-link dir-823 firmware/1.00b06-beta
- canonical/d-link dir-865l firmware
- version/d-link dir-865l firmware/1.07b01
- canonical/d-link dir-865l
- canonical/d-link dir-868l firmware
- version/d-link dir-868l firmware/1.12b04
- canonical/d-link dir-868lw
- version/d-link dir-868l firmware/2.05b02
- canonical/d-link dir-869
- version/d-link dir-869/1.03b02
- version/d-link dir-869/1.03b02-beta02
- canonical/d-link dir-869ax
- canonical/d-link dir-880l firmware
- version/d-link dir-880l firmware/1.08b04
- canonical/d-link dir-890l firmware
- version/d-link dir-890l firmware/1.11b01
- version/d-link dir-890l firmware/1.11b01-beta01
- canonical/d-link dir-890r firmware
- version/d-link dir-890r firmware/1.11b01
- version/d-link dir-890r firmware/1.11b01-beta01
- canonical/d-link dir-890r
- canonical/d-link dir-885l firmware
- version/d-link dir-885l firmware/1.12b05
- canonical/dlink dir-885l mfc
- canonical/d-link dir-885r firmware
- version/d-link dir-885r firmware/1.12b05
- canonical/d-link dir-885r
- canonical/d-link dir-895l firmware
- version/d-link dir-895l firmware/1.12b10
- canonical/d-link dir-895r firmware
- version/d-link dir-895r firmware/1.12b10
- canonical/d-link dir-895r
- canonical/d-link dir-818l firmware