PT-2014-2868 · D Link · D-Link Dir-505L Shareport Mobile Companion+1

Published 2014-05-12 · Updated 2023-04-26 · CVE-2013-4772

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-505L SharePort Mobile Companion version 1.01 D-Link DIR-826L Wireless N600 Cloud Router version 1.02

Description The issue allows remote attackers to bypass authentication via a direct request when an authorized session is active. This means that if there is an active authorized session, an unauthorized user can send a direct request to gain access without being authenticated.

Recommendations For D-Link DIR-505L SharePort Mobile Companion version 1.01, consider restricting access to the device when not in use to minimize the risk of exploitation. For D-Link DIR-826L Wireless N600 Cloud Router version 1.02, restrict access to the router's web interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-4772

Affected Products

D-Link Dir-505L Shareport Mobile Companion

D-Link Dir-826L Wireless N600 Cloud Router

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-4772 · Security Note
• http://packetstormsecurity.com/files/122314/D-Link-DIR-505L-DIR-826L-Authentication-Bypass.html · Note