PT-2014-5567 · D Link · D-Link Dap-1350

CVE-2014-3872 · Publicado 2014-05-27 · Atualizado 2023-04-26

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions D-Link DAP-1350 versions 1.14 and earlier

Description The issue concerns SQL injection vulnerabilities in the administration login page. Remote attackers can execute arbitrary SQL commands via the username or password variables.

Recommendations For D-Link DAP-1350 versions 1.14 and earlier, update to a version later than 1.14 to resolve the issue.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2014-3872

Produtos afetados

D-Link Dap-1350

Referências · 4

• 🔥 http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10023 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-3872 · Nota de Segurança
• http://secunia.com/advisories/58254 · Nota
• http://securityfocus.com/bid/67310 · Nota