What is CVE-2019-13373?

CVE-2019-13373 is a vulnerability in N/a. Published 2019-07-06.

Is CVE-2019-13373 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2019-13373

An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. Input does not get validated and arbitrary SQL statements can be executed in the database via the /web/Public/Conn.php parameter dbSQL.

EPSS: 0.901 (99.6th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework

References

unh3x.github.io/2019/02/21/D-link-(CWM-100)-Multiple-Vulnerabilities/ (x_refsource_MISC)
github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-(CWM-100)… (x_refsource_MISC)
supportannouncement.us.dlink.com/announcement/publication.aspx (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2019-13373?: CVE-2019-13373 is a vulnerability in N/a. Published 2019-07-06.
Is CVE-2019-13373 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.