DIR-868L: Router Gigabit Cloud Dual Band AC 1750

[Carciofone]

ATTENZIONE: nuovo firmware per questo ormai stabilissimo DIR-868L A1 1.20b07-jblf stabile del 20191121 Nel primo post!

Changelog: al'interno del file.

Codice Seleziona Espandi

DIR-868L Rev.A Release Note


Firmware: 1.20b07-jblf
Hardware: Ax
Date: 2019/11/21

Problems Resolved:
1. Fix security issue CVE-2019-17621: Unauthenticated remote command execution
2. Fix security issue CVE-2019-20213: Information Disclosure LAN-side security vulnerability

----------
Firmware: 1.20b03-01-i5ia
Hardware: Ax
Date: 2018/05/18

Problems Resolved:
1. Fix SharePort Plus utility can't find USB device anymore.

----------
Firmware: v1.20B01
Hardware: Ax
Date: 2018/02/28

Problems Resolved:
1. CVE-2018-6527
XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php allowing remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi

2. CVE-2018-6528
XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php allowing remote attackers to read a cookie via a crafted receiver parameter to soap.cgi

3. CVE-2018-6529
XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php allowing remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi

4. CVE-2018-6530
OS command injection vulnerability in soap.cgi (soapcgi_main incgibin) allowing remote attackers to execute arbitrary OS commands via the service parameter


Attenzione: sarà necessario aggiornare mediante il firmware intermedio 1.13B01 e poi al definitivo 1.20B07.

[Carciofone]

ATTENZIONE: nuovo firmware per il seguitissimo DIR-868L B1 2.20B01_BETA01 K1DB stabile del 20200220 Nel primo post!

Changelog: al'interno del file.

Codice Seleziona Espandi

DIR-868L Firmware Release Notes
Firmware: 2.20B01_BETA01_K1DB
Hardware: Bx
Date: February 20, 2020
Security Incident Report:
DIR-868L Bx v2.03 & Lower
DIR-885L Ax v1.20 & Lower
DIR-895L Ax v1.21 & Lower
- CVE-2019-16190 - Authentication Bypass to USB access Shareport
Public Disclosure & Attributed to:
https://cyberloginit.com/2019/09/10/dlink-shareport-web-access-authentication-bypass.html[/b]

[fabiopo]

salve qualcuno riesce ad inviare la lingua italiana visto che per errore ho messo il tedesco?

ho provato a cercare il file DIR868LA1_100IT.lng contenuto nel firmware 1.08B03 linkato nel primo post ma non è più presente e il link dei nuovi firmware punta al FTP tedesco.

[m4ss1]

Ciao, trovi tutto qui:
https://tsd.dlink.com.tw

[fabiopo]

Ciao, trovi tutto qui:
https://tsd.dlink.com.tw

grazie mille ... neanche il supporto era riuscito ad inviarmi il file

[Alby]

ATTENZIONE: nuovo firmware per DIR-868L B1 2.20B02 BETA1 HOTFIX del 26.08.2020 Nel primo post!

Changelog:

Codice Seleziona Espandi

Firmware: 2.20B02_BETA01 Hotfix Hardware: Bx Date: August 26, 2020
Problems Resolved:
1.Unauthenticated RCE (LAN-Side) via UPNP a.CVE-2019-20215 b.CVE-2019-20216 c.CVE-2019-20217
2.Unathenticated remote command execution on the LAN-Side a.CVE-2019-17621 b.CVE-2019-20213

3rd Party Report:
- Miguel Mendez Z. — (s1kr10s) - Research Center at Telefónica Chile
- Pablo Pollanco — (secenv) - Research Center at Telefónica Chile