Количество 3
Количество 3
CVE-2019-17506
There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's username and password (and other information) via a DEVICE.ACCOUNT value for SERVICES in conjunction with AUTHORIZED_GROUP=1%0a to getcfg.php. This could be used to control the router remotely.
GHSA-r9jg-89wp-76vr
There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's username and password (and other information) via SERVICES=DEVICE.ACCOUNT&AUTHORIZED_GROUP=1%0a to getcfg.php. This could be used to control the router remotely.
BDU:2019-04631
Уязвимость веб-интерфейса микропрограммного обеспечения беспроводных маршрутизаторов D-Link DIR-868L B1 и D-Link DIR-817LW A1, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-17506 There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's username and password (and other information) via a DEVICE.ACCOUNT value for SERVICES in conjunction with AUTHORIZED_GROUP=1%0a to getcfg.php. This could be used to control the router remotely. | CVSS3: 9.8 | 94% Критический | больше 6 лет назад |
| GHSA-r9jg-89wp-76vr There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's username and password (and other information) via SERVICES=DEVICE.ACCOUNT&AUTHORIZED_GROUP=1%0a to getcfg.php. This could be used to control the router remotely. | 94% Критический | больше 3 лет назад | |
 | BDU:2019-04631 Уязвимость веб-интерфейса микропрограммного обеспечения беспроводных маршрутизаторов D-Link DIR-868L B1 и D-Link DIR-817LW A1, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 9.8 | 94% Критический | больше 6 лет назад |
Уязвимостей на страницу