Overview

The DAP-1320 Rev. A1 contains a flaw that allow directory path traversal and cross-sby exploiting the POST parameters to apply.cgi.

References

 Kyle Lovett - http://packetstormsecurity.com/files/126219/D-Link-DAP-1320-Directory-Traver

Description

In order to maintain author's intent of the disclosure please read at:  http://packetstormsecurity.com/files/126219/D-Link-DAP-1320-Directory-Traver

1) Directory Path Traversal - CWE-22: Path Traversal 

The POST param 'html_response_page' of apply.cgi suffers from a directory traversal vulnerability.


2) Cross-Stie Scripting - XSS - CWE-79: Cross Site Scripting

The POST param 'html_response_page' of apply.cgi suffers from a XSS vulnerability.

Affected Product

   

Model Name	HW Version	Current FW Version	New FW Version for this exploit fix
DAP-1320	A1/A2/B1	v. 1.20b06 and older	FW: 1.21b01 ** Release Notes: Link

Security patch for your D-Link Devices

** Please note that this vulnerability was fixed in 1.20b07, however the firmware has moved forward to address additional bugs, feature enhancments, and patch futher vulnerabilities with v.1.21b01

These firmware updates address the security vulnerabilities in affected D-Link devices. D-Link will update this continually and we strongly recommend all users to install the relevant updates.

As there are different hardware revisions on our products, please check this on your device before downloading the correct corresponding firmware update. The hardware revision information can usually be found on the product label on the underside of the product next to the serial number. Alternatively, they can also be found on the device web configuration.