Описание
The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:h:d-link:dir-100:1.02:*:*:*:*:*:*:*
cpe:2.3:h:d-link:dir-100:1.12:*:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.08883
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
почти 4 года назад
The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters.
EPSS
Процентиль: 92%
0.08883
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-20