Описание
An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform administrative tasks (e.g., modify the admin password) with no authentication.
Ссылки
- Third Party Advisory
- ExploitThird Party Advisory
- Vendor Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:dlink:dsl-2640b_firmware:eu_4.01b:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dsl-2640b:-:*:*:*:*:*:*:*
EPSS
Процентиль: 71%
0.00661
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-287
Связанные уязвимости
github
больше 3 лет назад
An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform administrative tasks (e.g., modify the admin password) with no authentication.
CVSS3: 9.8
fstec
почти 6 лет назад
Уязвимость cgi модулей программного обеспечения маршрутизаторов D-Link DSL-2640B, позволяющая нарушителю повысить свои привилегии
EPSS
Процентиль: 71%
0.00661
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-287