GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2013-5946

Vulnerability from fkie_nvd - Published: 2013-12-19 04:24 - Updated: 2026-06-16 23:59
Severity
Summary
The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "Ping or Trace an IP Address" or (2) "Perform a DNS Lookup" section.
Impacted products
Vendor Product Version
dlink dsr-500_firmware *
dlink dsr-500_firmware 1.02b11
dlink dsr-500_firmware 1.02b25
dlink dsr-500_firmware 1.03b12
dlink dsr-500_firmware 1.03b23
dlink dsr-500_firmware 1.03b27
dlink dsr-500_firmware 1.03b36
dlink dsr-500_firmware 1.03b43
dlink dsr-500_firmware 1.04b58
dlink dsr-500_firmware 1.06b43
dlink dsr-500_firmware 1.06b53
dlink dsr-500 -
dlink dsr-150n_firmware *
dlink dsr-150n -
dlink dsr-250n_firmware *
dlink dsr-250n_firmware 1.01b46
dlink dsr-250n_firmware 1.01b56
dlink dsr-250n_firmware 1.05b20
dlink dsr-250n_firmware 1.05b53
dlink dsr-250n_firmware 1.08b31
dlink dsr-250n -
dlink dsr-1000_firmware *
dlink dsr-1000_firmware 1.01b50
dlink dsr-1000_firmware 1.02b11
dlink dsr-1000_firmware 1.02b25
dlink dsr-1000_firmware 1.03b12
dlink dsr-1000_firmware 1.03b23
dlink dsr-1000_firmware 1.03b27
dlink dsr-1000_firmware 1.03b36
dlink dsr-1000_firmware 1.03b43
dlink dsr-1000_firmware 1.04b58
dlink dsr-1000_firmware 1.06b43
dlink dsr-1000_firmware 1.06b53
dlink dsr-1000 -
dlink dsr-150_firmware *
dlink dsr-150_firmware 1.05b29
dlink dsr-150_firmware 1.05b35
dlink dsr-150_firmware 1.05b46
dlink dsr-150_firmware 1.05b50
dlink dsr-150 -
dlink dsr-250_firmware *
dlink dsr-250_firmware 1.01b46
dlink dsr-250_firmware 1.01b56
dlink dsr-250_firmware 1.05b20
dlink dsr-250_firmware 1.05b53
dlink dsr-250_firmware 1.08b31
dlink dsr-250 -
dlink dsr-1000n_firmware *
dlink dsr-1000n_firmware 1.01b50
dlink dsr-1000n_firmware 1.02b11
dlink dsr-1000n_firmware 1.02b25
dlink dsr-1000n_firmware 1.03b12
dlink dsr-1000n_firmware 1.03b23
dlink dsr-1000n_firmware 1.03b27
dlink dsr-1000n_firmware 1.03b36
dlink dsr-1000n_firmware 1.03b43
dlink dsr-1000n_firmware 1.04b58
dlink dsr-1000n_firmware 1.06b43
dlink dsr-1000n_firmware 1.06b53
dlink dsr-1000n -
dlink dsr-500n_firmware *
dlink dsr-500n_firmware 1.02b11
dlink dsr-500n_firmware 1.02b25
dlink dsr-500n_firmware 1.03b12
dlink dsr-500n_firmware 1.03b23
dlink dsr-500n_firmware 1.03b27
dlink dsr-500n_firmware 1.03b36
dlink dsr-500n_firmware 1.03b43
dlink dsr-500n_firmware 1.04b58
dlink dsr-500n_firmware 1.06b43
dlink dsr-500n_firmware 1.06b53
dlink dsr-500n -

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2616EA9D-842A-4C08-BEC0-DD0DE15627C4",
              "versionEndIncluding": "1.08b51",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.02b11:*:*:*:*:*:*:*",
              "matchCriteriaId": "86F457CD-2B3A-4571-941B-CEEAD52635C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.02b25:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D5FB42D-B664-4CD1-A9BE-BEEB3D2455F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.03b12:*:*:*:*:*:*:*",
              "matchCriteriaId": "0836B735-04EB-46DA-A5FD-918CF254DC6D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.03b23:*:*:*:*:*:*:*",
              "matchCriteriaId": "C40D5762-D950-4C59-8E60-AD63A5C4F43E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.03b27:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD052065-A62C-4E77-AF30-A7BFE87BEF0D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.03b36:*:*:*:*:*:*:*",
              "matchCriteriaId": "84589477-A03F-4350-8F48-AA65A3E2F8EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.03b43:*:*:*:*:*:*:*",
              "matchCriteriaId": "73B9957F-92B8-471A-90C1-541857228220",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.04b58:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB19EF7D-8CDD-4640-B272-2B31C6C8DC40",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.06b43:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3DE0EAD-26FE-4A08-8B3F-94B7B46B3EE2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500_firmware:1.06b53:*:*:*:*:*:*:*",
              "matchCriteriaId": "3EEC400B-B9A7-4672-98BB-57EE722FDDBB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dsr-500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABF00635-340E-4116-8B4A-46138C13C9C3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dsr-150n_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2655D2C-0A71-4F14-8CB6-9A8E5B0BA2D2",
              "versionEndIncluding": "1.05b48",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dsr-150n:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "729C8468-E3D3-4089-B095-A41C719E9F8C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250n_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8875595-6A45-41F4-BD4F-88E4B01987FB",
              "versionEndIncluding": "1.08b39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250n_firmware:1.01b46:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D87E55E-8FB9-46DD-B7E3-0FF5844AACCE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250n_firmware:1.01b56:*:*:*:*:*:*:*",
              "matchCriteriaId": "7054BD9D-2CBD-4EB2-A52C-6EAD0DF16CEA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250n_firmware:1.05b20:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C7D6C20-02AB-45C2-8DF6-7406EF4B9E09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250n_firmware:1.05b53:*:*:*:*:*:*:*",
              "matchCriteriaId": "20584156-C553-4AEA-A19C-A4BB67B5390A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250n_firmware:1.08b31:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CB44CCA-AC5E-4169-A4DA-8873C1435C04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dsr-250n:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8754060-E58E-4A9A-AB59-0279E8BC793A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A6B7598-20C1-4F1A-BFA8-16C66D210216",
              "versionEndIncluding": "1.08b51",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.01b50:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F9A4E2D-8F74-4CD3-85F0-5DA4749B0F9F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.02b11:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DA26493-2F60-41C1-9563-75FAA116DBA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.02b25:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D5BA908-B289-4917-8AE3-E57DACB93501",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.03b12:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B94BCF9-13FC-4930-92A4-6AF97699672B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.03b23:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1AED08D-47B4-4A13-8291-2E49AEB1B69F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.03b27:*:*:*:*:*:*:*",
              "matchCriteriaId": "2904D8F1-633D-4DF8-9808-2961998CE510",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.03b36:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE195794-EDE9-477A-9934-8CE2ED1B19E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.03b43:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC8C2F15-6867-4647-9D2F-8F3D9F3054DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.04b58:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFF08CD6-A360-4291-8159-DB2A07B8F2A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.06b43:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDDBCCF6-71B8-45A8-86C4-97B622793179",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000_firmware:1.06b53:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF0BFC1A-B6DF-4D2E-9DD9-566E20CAD172",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dsr-1000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFF423A8-2E0B-4618-B384-5C97B4315B88",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dsr-150_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "83CA3AD5-8BB3-4C52-B1D4-57F24C7E3ECE",
              "versionEndIncluding": "1.08b29",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-150_firmware:1.05b29:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDDC40C8-1BB2-4151-BAA4-E28C5AC94654",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-150_firmware:1.05b35:*:*:*:*:*:*:*",
              "matchCriteriaId": "ADB61873-D7C7-400D-AAA3-5F65F459B573",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-150_firmware:1.05b46:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AD638F5-3A13-45D2-A343-1733611C5173",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-150_firmware:1.05b50:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A27097B-44CF-47FB-90D1-0D244209E9DC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dsr-150:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F9246BA-7F85-4564-B1B5-03BBBF9E2F35",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F360917-0D86-4B7C-8699-EAE3A5155DAD",
              "versionEndIncluding": "1.08b39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250_firmware:1.01b46:*:*:*:*:*:*:*",
              "matchCriteriaId": "91015BD6-F1EF-4E77-991E-5A895DF204FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250_firmware:1.01b56:*:*:*:*:*:*:*",
              "matchCriteriaId": "36443128-6668-4FB6-9B96-1C695EB5B0BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250_firmware:1.05b20:*:*:*:*:*:*:*",
              "matchCriteriaId": "11E46972-D923-4AB7-BC2E-49D9DBC65202",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250_firmware:1.05b53:*:*:*:*:*:*:*",
              "matchCriteriaId": "71900351-AF65-4AFB-A77E-361075583F43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-250_firmware:1.08b31:*:*:*:*:*:*:*",
              "matchCriteriaId": "0540F822-7F53-4282-A480-6E4A15994AF8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dsr-250:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "702F0FE2-5E5A-4E2B-8B7A-A0C84FF74F4E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "289208CD-49AB-48A8-AD2E-BF4AFA479990",
              "versionEndIncluding": "1.08b51",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.01b50:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FA9027F-9EBE-45FB-8128-E1E27F1B12EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.02b11:*:*:*:*:*:*:*",
              "matchCriteriaId": "90E36C7E-02A1-4389-A706-B73D6C236E50",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.02b25:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5146B3C-CC4C-49C4-9B8B-BF9FC3E45293",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b12:*:*:*:*:*:*:*",
              "matchCriteriaId": "79117184-9444-443B-9CF8-F4D2E19413A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b23:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD92EB60-B33E-4653-BE5B-449DC18E073F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b27:*:*:*:*:*:*:*",
              "matchCriteriaId": "DAE86995-60E0-4F50-A008-EBB227CC4207",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b36:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B6BA51E-FCC6-4BCC-A4FF-AF49602C6D5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.03b43:*:*:*:*:*:*:*",
              "matchCriteriaId": "484A7789-9A84-4E01-B7C8-97FC769D21AA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.04b58:*:*:*:*:*:*:*",
              "matchCriteriaId": "592C6173-8084-4857-AD6A-DDF9F66CE881",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.06b43:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8025D5C-331B-4A62-9A0D-29EA63E7AB30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-1000n_firmware:1.06b53:*:*:*:*:*:*:*",
              "matchCriteriaId": "2987ACFB-FE89-4901-8A64-B5B61F4D4EE1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dsr-1000n:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3CE07EC6-89F9-4E76-A5CE-B8EA28727F9A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA8E760B-FBD1-4949-9E7C-35E216094B58",
              "versionEndIncluding": "1.08b51",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.02b11:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0478AA5-8740-4458-855A-11804597FA6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.02b25:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6009D02-5CE9-4D08-8C6A-005F66ED8A29",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.03b12:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DBC6011-8C8A-4EAA-8B6B-933C128E7A97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.03b23:*:*:*:*:*:*:*",
              "matchCriteriaId": "540C7261-9352-4CF1-BCF8-13615EFB7C4E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.03b27:*:*:*:*:*:*:*",
              "matchCriteriaId": "31C51D13-005D-4CB0-AB05-D38CC4E5096B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.03b36:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C3F3332-EEE2-492F-9585-62E4256ECBC5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.03b43:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DE1C593-B0E7-4715-9AA5-CF7A3A87F05E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.04b58:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D4D1637-5291-45CD-BA6A-B71D9199F0F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.06b43:*:*:*:*:*:*:*",
              "matchCriteriaId": "25136989-A83E-4C65-A354-8A0E2101EE26",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:dlink:dsr-500n_firmware:1.06b53:*:*:*:*:*:*:*",
              "matchCriteriaId": "36E387CF-AAE4-4EED-A7E2-6D2FE9B5933F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dsr-500n:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B085DCB-4804-43ED-8634-0B4EB8DCD750",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) \"Ping or Trace an IP Address\" or (2) \"Perform a DNS Lookup\" section."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n runShellCmd en systemCheck.htm en D-Link DSR-150 con firmware anterior a 1.08B44; DSR-150N con firmware anterior a 1.05B64; DSR-250 y DSR-250N con firmware anterior a 1.08B44; y DSR500, DSR-500N, DSR-1000, y DSR-100N con firmware anterior a 1.08B77 permite a atacantes remotos ejecutar comandos arbitrarios a trav\u00e9s de metacaracteres de la consola en la secci\u00f3n (1) \"Ping or Trace an IP Address\" o (2) \"Perform a DNS Lookup\"."
    }
  ],
  "id": "CVE-2013-5946",
  "lastModified": "2026-06-16T23:59:46.853",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-12-19T04:24:51.930",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.exploit-db.com/exploits/30061"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.exploit-db.com/exploits/30061"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…