CVE-2020-15894

Опубликовано: 22 июл. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. There exists an exposed administration function in getcfg.php, which can be used to call various services. It can be utilized by an attacker to retrieve various sensitive information, such as admin login credentials, by setting the value of _POST_SERVICES in the query string to DEVICE.ACCOUNT.

Ссылки

https://research.loginsoft.com/bugs/multiple-vulnerabilities-discovered-in-the-d-link-firmware-dir-816l/
Third Party Advisory
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10169
Patch
Vendor Advisory
https://research.loginsoft.com/bugs/multiple-vulnerabilities-discovered-in-the-d-link-firmware-dir-816l/
Third Party Advisory
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10169
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:dlink:dir-816l_firmware:2.06:*:*:*:*:*:*:*

cpe:2.3:o:dlink:dir-816l_firmware:2.06.b09:beta:*:*:*:*:*:*

cpe:2.3:h:dlink:dir-816l:b1:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01272

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-306

Связанные уязвимости

GHSA-4xhc-v448-j5jx