D-Link 850L Multiple Vulnerabilities (Hack2Win Contest)

[danilabs]

The following advisory describe three (3) vulnerabilities found in D-Link 850L router.

The vulnerabilities have been reported as part of Hack2Win competition, for more information about Hack2Win – Hack2Win – https://blogs.securiteam.com/index.php/archives/3310.

The vulnerabilities found in D-Link 850L are:

• Remote Command Execution via WAN and LAN
• Remote Unauthenticated Information Disclosure via WAN and LAN
• Unauthorized Remote Code Execution as root via LAN

References:

• https://www.seebug.org/vuldb/ssvid-96333

[meoww-bot]

I'll do it later...