CVE-2017-9675

Опубликовано: 15 июн. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Средний

Описание

On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.

Ссылки

ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-605L/REVB/DIR-605L_REVB_RELEASE_NOTES_v2.08UIBETAB01_EN.pdf
Vendor Advisory
http://www.securityfocus.com/bid/99084
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/43147/
ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-605L/REVB/DIR-605L_REVB_RELEASE_NOTES_v2.08UIBETAB01_EN.pdf
Vendor Advisory
http://www.securityfocus.com/bid/99084
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/43147/

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:dir-605l_firmware:2.08b01:*:*:*:*:*:*:*

cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.3088

Средний

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-j28v-fc6m-pfcf

CVSS3: 7.5

github

больше 3 лет назад