rapid7/metasploit-framework — pull request #2127 by m-1-k-3 (2013-07-19 06:10:54+00:00)
Title: D-Link UPnP command injection

Hey guys,

attached you could find a module for exploiting a OS command injection vulnerability in the SOAP UPnP interface of different D-Link routers.

At least the following devices are vulnerable:
DIR-300 rev B - 2.14b01
DIR-600 - 2.16b01
DIR-645 - 1.04b01
DIR-845 - 1.01b02
DIR-865 - 1.05b03

You could find the advisory here: http://www.s3cur1ty.de/M1ADV2013-020

Best,
MIke