Security readout for executives and security teams
Plain-English summary
CVE-2019-13375 is an unauthenticated SQL injection in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. If exposed, it could let an attacker interact with the application database through a vulnerable passcode authentication path. The source bundle does not provide CVSS, deployment prevalence, or confirmed exploitation.
Executive priority
Treat as a high-priority legacy management-plane risk if CWM(100) is present. The lack of CVSS and KEV evidence lowers certainty, but unauthenticated SQL injection in network management software can create meaningful business exposure.
Technical view
The issue is in PayAction.class.php, affecting the index.php/Pay/passcodeAuth passcode parameter. The CVE description states authentication is not required. The affected range is described as CWM(100) before v1.03R0100_BETA6, but the provided structured affected-product metadata is incomplete.
Likely exposure
Exposure is most likely where D-Link Central WiFi Manager CWM(100) is deployed below v1.03R0100_BETA6, especially if the management application is reachable from untrusted networks. The source bundle does not provide CPEs or internet exposure data.
Exploitation context
CISA KEV status is false, and the provided sources do not state active exploitation in the wild. Public references include researcher disclosure material and a D-Link support announcement, indicating public technical awareness but not confirmed exploitation.
Researcher notes
The CVE record names the vulnerable file, route, and parameter, but structured affected-product fields are sparse. Analysis should stay tied to CWM(100) before v1.03R0100_BETA6 and D-Link SAP10117. Do not infer other D-Link products are affected from this bundle alone.
Mitigation direction
- Confirm installed CWM(100) version and compare against v1.03R0100_BETA6.
- Review D-Link SAP10117 for vendor-approved update or mitigation guidance.
- Upgrade affected deployments where D-Link guidance provides a fixed release.
- Restrict Central WiFi Manager access to trusted administrative networks only.
- Monitor application and database logs for suspicious passcodeAuth activity.
Validation and detection
- Inventory all D-Link Central WiFi Manager CWM(100) instances.
- Verify whether each instance is before v1.03R0100_BETA6.
- Check whether the management interface is reachable from the internet or guest networks.
- Review logs for unusual requests to index.php/Pay/passcodeAuth.
- Confirm remediation using vendor version information, not active exploitation testing.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Database behavior lookup
The CVE wording references database injection or access, so collection and exfiltration review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2019-13375 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://unh3x.github.io/2019/02/21/D-link-%28CWM-100%29-Multiple-Vulnerabilities/CVE reference · x_refsource_MISC
- https://github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-%28CWM-100%29-Multiple-Vulnerabilities.mdCVE reference · x_refsource_MISC
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.