Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h9rg-jfq5-wf8g

Опубликовано: 16 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.

EPSS

Процентиль: 52%
0.00291
Низкий

8.8 High

CVSS3

Дефекты

CWE-912

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.

CVSS3: 8.8
fstec
больше 1 года назад

Уязвимость службы telnet беспроводных маршрутизаторов D-Link DIR-X4860, DIR-X5460A1 и COVR-X1870, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации

EPSS

Процентиль: 52%
0.00291
Низкий

8.8 High

CVSS3

Дефекты

CWE-912