PT-2018-2072 · D Link · D-Link Dir-620

Published 2018-01-15 · Updated 2018-01-15 · CVE-2018–12419

PT · AI

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: D-Link DIR-620 (affected versions not specified)

Description: The issue is related to insufficient access control in the firmware of D-Link DIR-620 routers. It allows a remote attacker to gain access to protected information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2019-00022

CVE-2018–12419

Affected Products

D-Link Dir-620

References · 4

• https://bdu.fstec.ru/vul/2019-00022 · Security Note
• https://medium.com/@makrushin/backdoors-in-d-links-backyard-part-2-multiple-vulnerabilities-in-d-link-dir-620-1334ec4badcf · Note
• https://securitylab.ru/vulnerability/496294.php · Note
• https://cybersecurity-help.cz/vdb/SB2018110508?affChecked=1 · Note