CVE-2013-4654 - OpenCVE

Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:N/AC:L/Au:N/C:C/I:C/A:C

Vendors & Products
CPE Configurations

Vendors	Products
Tp-link	Tl-1043nd Tl-wdr4300 Firmware Tl-wdr4300 Tl-1043nd Firmware

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wdr4300:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:tp-link:tl-1043nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-1043nd:-:*:*:*:*:*:*:*

References

Link	Resource
https://www.ise.io/casestudies/exploiting-soho-routers/	Mitigation Third Party Advisory
https://www.ise.io/soho_service_hacks/	Third Party Advisory
https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2019-11-13T15:56:46

Updated: 2019-11-13T15:56:46

Reserved: 2013-06-24T00:00:00

Link: CVE-2013-4654

JSON object: View

NVD Information

Status : Analyzed

Published: 2019-11-13T16:15:10.690

Modified: 2019-11-25T15:18:08.567

Link: CVE-2013-4654

JSON object: View

Redhat Information

No data.

CWE

CWE-22

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "80E9BE57-D638-4E08-B8AC-D44BCBCE2E7C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-wdr4300:-:*:*:*:*:*:*:*", "matchCriteriaId": "C24928A1-5158-41FF-B29C-9E7AEC7BED31", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-1043nd_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B73902C-B895-4B19-9977-6CE5343F0A2F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-1043nd:-:*:*:*:*:*:*:*", "matchCriteriaId": "7EE689EC-391A-4D04-A92C-DCC2D29C175C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND.."}, {"lang": "es", "value": "Una vulnerabilidad de Salto de Enlace Simb\u00f3lico en TP-LINK TL-WDR4300 y TL-1043ND."}], "id": "CVE-2013-4654", "lastModified": "2019-11-25T15:18:08.567", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-11-13T16:15:10.690", "references": [{"source": "cve@mitre.org", "tags": ["Mitigation", "Third Party Advisory"], "url": "https://www.ise.io/casestudies/exploiting-soho-routers/"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://www.ise.io/soho_service_hacks/"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}