Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cj6q-74j6-gvjm

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests.

htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests.

EPSS

Процентиль: 46%
0.00234
Низкий

7.5 High

CVSS3

Дефекты

CWE-307

Связанные уязвимости

CVSS3: 7.5
nvd
больше 8 лет назад

htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests.

EPSS

Процентиль: 46%
0.00234
Низкий

7.5 High

CVSS3

Дефекты

CWE-307