ID
VAR-202004-2244
TITLE
D-Link DIR-615 privilege elevation vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2020-22294
DESCRIPTION
D-Link DIR-615 is a wireless router from D-Link, Taiwan. D-Link DIR-615 has a privilege escalation vulnerability. The vulnerability stems from the program's failure to complete verification and error detection of the file path. Attackers can use the REST API to upload malicious software to exploit this vulnerability to elevate permissions.
Trust: 0.6
sources:
CNVD: CNVD-2020-22294
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2020-22294
AFFECTED PRODUCTS
| vendor: | d link | model: | dir-615 | scope: | - | version: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2020-22294
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2020-22294
PATCH
| title: | Patch for D-Link DIR-615 privilege elevation vulnerability | url: | https://www.cnvd.org.cn/patchinfo/show/213427 | Trust: 0.6 |
sources:
CNVD: CNVD-2020-22294
EXTERNAL IDS
| db: | PACKETSTORM | id: | 155668 | Trust: 0.6 |
| db: | CXSECURITY | id: | WLB-2019120072 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2020-22294 | Trust: 0.6 |
sources:
CNVD: CNVD-2020-22294
REFERENCES
| url: | https://packetstormsecurity.com/files/155668/d-link-dir-615-privilege-escalation.html | Trust: 0.6 |
| url: | https://cxsecurity.com/issue/wlb-2019120072 | Trust: 0.6 |
sources:
CNVD: CNVD-2020-22294
SOURCES
| db: | CNVD | id: | CNVD-2020-22294 |
LAST UPDATE DATE
2022-05-17T02:09:42.146000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2020-22294 | date: | 2020-04-11T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2020-22294 | date: | 2020-04-11T00:00:00 |