PT-2019-15099 · D Link · Dir-615

Published 2019-10-09 · Updated 2021-04-23 · CVE-2019-17353

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions 20.05 through 20.07

Description The issue allows direct access to "wan.htm" without authentication, potentially leading to the disclosure of WAN information and modification of the page's data fields by an attacker.

Recommendations For versions 20.05 and 20.07, consider restricting access to the "wan.htm" page until a fix is available. As a temporary workaround, limit the exposure of the device to the internet to minimize the risk of exploitation.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-17353

Affected Products

Dir-615

References · 6

• 🔥 https://github.com/d0x0/D-Link-DIR-615/blob/master/CVE-2019-17353 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-17353 · Security Note
• https://us.dlink.com/en/security-advisory · Vendor Advisory
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-17353 · Vendor Advisory
• https://ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf · Note