PT-2014-5567 · D Link · D-Link Dap-1350

Published 2014-05-27 · Updated 2023-04-26 · CVE-2014-3872

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions D-Link DAP-1350 versions 1.14 and earlier

Description The issue concerns SQL injection vulnerabilities in the administration login page. Remote attackers can execute arbitrary SQL commands via the username or password variables.

Recommendations For D-Link DAP-1350 versions 1.14 and earlier, update to a version later than 1.14 to resolve the issue.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-3872

Affected Products

D-Link Dap-1350

References · 4

• 🔥 http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10023 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-3872 · Security Note
• http://secunia.com/advisories/58254 · Note
• http://securityfocus.com/bid/67310 · Note