ID
VAR-201708-1647
TITLE
D-Link DIR Series Router Authentication Information Disclosure Vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2017-20002
DESCRIPTION
The DIR series is a series of cloud router products from D-Link. The D-LinkDIR series routers have a remote information bypass vulnerability that triggers global variables when an administrator logs in to the device. Therefore, an attacker can use this global variable to bypass security checks and use it to read arbitrary files and obtain sensitive information such as administrator account passwords.
Trust: 0.6
sources:
CNVD: CNVD-2017-20002
IOT TAXONOMY
| category: | ['IoT', 'Network device'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2017-20002
AFFECTED PRODUCTS
| vendor: | d link | model: | dir-815 | scope: | - | version: | - | Trust: 0.6 |
| vendor: | d link | model: | dir-868l | scope: | - | version: | - | Trust: 0.6 |
| vendor: | d link | model: | dir-860l | scope: | - | version: | - | Trust: 0.6 |
| vendor: | d link | model: | dir-890l | scope: | - | version: | - | Trust: 0.6 |
| vendor: | d link | model: | dir-610l | scope: | - | version: | - | Trust: 0.6 |
| vendor: | d link | model: | dir-822 | scope: | - | version: | - | Trust: 0.6 |
| vendor: | d link | model: | dir-600 | scope: | - | version: | - | Trust: 0.6 |
| vendor: | d link | model: | dir-850l | scope: | - | version: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2017-20002
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2017-20002
PATCH
| title: | Patch for D-LinkDIR Series Router Identity Authentication Information Disclosure Vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/99782 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-20002
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2017-20002 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-20002
REFERENCES
| url: | https://blogs.securiteam.com/index.php/archives/3364 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-20002
SOURCES
| db: | CNVD | id: | CNVD-2017-20002 |
LAST UPDATE DATE
2022-05-04T10:22:38.790000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2017-20002 | date: | 2017-08-10T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2017-20002 | date: | 2017-08-10T00:00:00 |