exploitDog

CVE-2022-38258

Опубликовано: 08 сент. 2022

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter in a crafted web request.

Ссылки

https://whokilleddb.github.io/blogs/posts/dlink_dir-819_lfi_and_dos/
Exploit
Third Party Advisory
https://www.dlink.com/en/security-bulletin/
Vendor Advisory
https://whokilleddb.github.io/blogs/posts/dlink_dir-819_lfi_and_dos/
Exploit
Third Party Advisory
https://www.dlink.com/en/security-bulletin/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:dir-819_firmware:1.06:*:*:*:*:*:*:*

cpe:2.3:h:dlink:dir-819:-:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01403

Низкий

8.1 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-wrwg-gcqp-2g8m

CVSS3: 8.1

github

больше 3 лет назад

A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter in a crafted web request.

EPSS

Процентиль: 80%

0.01403

Низкий

8.1 High

CVSS3

Дефекты

CWE-22