D-Link UPnP command injection

Hey guys,

 attached you could find a module for exploiting a OS command injection vulnerability in the SOAP UPnP interface of different D-Link routers.

At least the following devices are vulnerable:
DIR-300 rev B - 2.14b01
DIR-600 - 2.16b01
DIR-645 - 1.04b01
DIR-845 - 1.01b02
DIR-865 - 1.05b03

You could find the advisory here: http://www.s3cur1ty.de/M1ADV2013-020

Best,
MIke