Описание
The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:h:d-link:dir-100:1.02:*:*:*:*:*:*:*
cpe:2.3:h:d-link:dir-100:1.12:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.04246
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
больше 4 лет назад
The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restriction filters.
EPSS
Процентиль: 90%
0.04246
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-20