vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2013-5945

CRITICAL
9.8
CVSS Score
Published: February 11, 2020 at 01:54 AM UTC
Updated: June 16, 2026 at 11:59 PM UTC
16 products affected across 1 vendorDsr 250N FirmwareDsr 1000N FirmwareDsr 250 Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
CRITICAL9.8
Exploit prediction
EPSS 10%

Description

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allow remote attackers to execute arbitrary SQL commands via the password to (1) the login.authenticate function in share/lua/5.1/teamf1lualib/login.lua or (2) captivePortal.lua.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Dsr 1000 Firmware· D-Link
95%
v < 1.08b77
Affected range stops below 1.08b77, so it looks safe — our inference, not a vendor statement
dlink-dsr-1000 (same device)
Dsr 1000N Firmware· D-Link
95%
v < 1.08b77
Affected range stops below 1.08b77, so it looks safe — our inference, not a vendor statement
dlink-dsr-1000n (same device)
Dsr 150 Firmware· D-Link
95%
v < 1.08b44
Affected range stops below 1.08b44, so it looks safe — our inference, not a vendor statement
dlink-dsr-150 (same device)
Dsr 150N Firmware· D-Link
95%
v < 1.05b64
Affected range stops below 1.05b64, so it looks safe — our inference, not a vendor statement
dlink-dsr-150n (same device)
Dsr 250 Firmware· D-Link
95%
v < 1.08b44
Affected range stops below 1.08b44, so it looks safe — our inference, not a vendor statement
dlink-dsr-250 (same device)
Dsr 250N Firmware· D-Link
95%
v < 1.08b44
Affected range stops below 1.08b44, so it looks safe — our inference, not a vendor statement
dlink-dsr-250n (same device)
Dsr 500 Firmware· D-Link
95%
v < 1.08b77
Affected range stops below 1.08b77, so it looks safe — our inference, not a vendor statement
dlink-dsr-500 (same device)
Dsr 500N Firmware· D-Link
95%
v < 1.08b77
Affected range stops below 1.08b77, so it looks safe — our inference, not a vendor statement
dlink-dsr-500n (same device)
Dsr 1000· D-Linkdevice
80%
All versions
Dsr 1000N· D-Linkdevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

x_refsource_MISCx_refsource_CONFIRMBroken Link
Source: [email protected]
http://tsd.dlink.com.tw/temp/PMD/12879/DSR-500_500N_1000_1000N_A1_Release_Notes_FW_v1.08B77_WW.pdf
x_refsource_MISCx_refsource_CONFIRMBroken Link
Source: [email protected]
http://tsd.dlink.com.tw/temp/PMD/12960/DSR-150N_A2_Release_Notes_FW_v1.05B64_WW.pdf
x_refsource_MISCx_refsource_CONFIRMBroken Link
Source: [email protected]
http://tsd.dlink.com.tw/temp/PMD/12966/DSR-150_A1_A2_Release_Notes_FW_v1.08B44_WW.pdf
x_refsource_MISCx_refsource_CONFIRMBroken Link
Source: [email protected]
http://tsd.dlink.com.tw/temp/PMD/13039/DSR-250_250N_A1_A2_Release_Notes_FW_v1.08B44_WW_RU.pdf
x_refsource_MISCExploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
Source: [email protected]
http://www.exploit-db.com/exploits/30061

CVSS

9.8CRITICAL[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-89

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card