PT-2019-15099 · D Link · Dir-615

Publicado 2019-10-09 · Atualizado 2021-04-23 · CVE-2019-17353

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions 20.05 through 20.07

Description The issue allows direct access to "wan.htm" without authentication, potentially leading to the disclosure of WAN information and modification of the page's data fields by an attacker.

Recommendations For versions 20.05 and 20.07, consider restricting access to the "wan.htm" page until a fix is available. As a temporary workaround, limit the exposure of the device to the internet to minimize the risk of exploitation.

Exploit

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2019-17353

Produtos afetados

Dir-615

Referências · 6

• 🔥 https://github.com/d0x0/D-Link-DIR-615/blob/master/CVE-2019-17353 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-17353 · Nota de Segurança
• https://us.dlink.com/en/security-advisory · Aviso do Fabricante
• https://dlink.com/en/security-bulletin · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-17353 · Aviso do Fabricante
• https://ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf · Nota