ID

VAR-E-201505-0351


CVE

cve_id:CVE-2014-7858

Trust: 0.3

sources: BID: 74886

TITLE

D-Link DNR-326 CVE-2014-7858 Authentication Bypass Vulnerability

Trust: 0.3

sources: BID: 74886

DESCRIPTION

D-Link DNR-326 is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and gain unauthorized access. This may aid in further attacks.

Trust: 0.3

sources: BID: 74886

AFFECTED PRODUCTS

vendor:d linkmodel:dnr-326 1.40b03scope: - version: -

Trust: 0.3

vendor:d linkmodel:dnr-326 2.10.b03scope:neversion: -

Trust: 0.3

sources: BID: 74886

EXPLOIT

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Trust: 0.3

sources: BID: 74886

PRICE

Free

Trust: 0.3

sources: BID: 74886

TYPE

Boundary Condition Error

Trust: 0.3

sources: BID: 74886

CREDITS

Search-Laboratory Ltd.

Trust: 0.3

sources: BID: 74886

EXTERNAL IDS

db:NVDid:CVE-2014-7858

Trust: 0.3

db:BIDid:74886

Trust: 0.3

sources: BID: 74886

REFERENCES

url:http://www.search-lab.hu/media/d-link_security_advisory_3_0_public.pdf

Trust: 0.3

url:http://www.dlink.com/

Trust: 0.3

url:http://support.dlink.com/productinfo.aspx?m=dnr-326

Trust: 0.3

sources: BID: 74886

SOURCES

db:BIDid:74886

LAST UPDATE DATE

2022-07-27T09:51:56.676000+00:00


SOURCES UPDATE DATE

db:BIDid:74886date:2015-05-28T00:00:00

SOURCES RELEASE DATE

db:BIDid:74886date:2015-05-28T00:00:00