PT-2018-2068 · D Link · D-Link Dir-620

Publicado 2018-01-15 · Atualizado 2018-01-15 · CVE-2018–12676

PT · AI

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: D-Link DIR-620 (affected versions not specified)

Description: The issue is related to the use of predefined registration data in the firmware of the affected device. It allows a remote attacker to elevate privileges and execute arbitrary code.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2019-00018

CVE-2018–12676

Produtos afetados

D-Link Dir-620

Referências · 4

• https://medium.com/@makrushin/backdoors-in-d-links-backyard-part-2-multiple-vulnerabilities-in-d-link-dir-620-1334ec4badcf · Nota
• https://securitylab.ru/vulnerability/496294.php · Nota
• https://bdu.fstec.ru/vul/2019-00018 · Nota de Segurança
• https://cybersecurity-help.cz/vdb/SB2018110508?affChecked=1 · Nota