PT-2020-13349 · D Link+1 · D-Link Dsp-W215+1

Leopoldo Aguirre · Published 2020-05-18 · Updated 2023-04-26 · CVE-2020-13135

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DSP-W215 version 1.26b03

Description The issue allows information disclosure by intercepting messages on the local network. This can be demonstrated using a Squid Proxy.

Recommendations For D-Link DSP-W215 version 1.26b03, consider restricting access to the local network to minimize the risk of information disclosure until a patch is available.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2020-13135

Affected Products

D-Link Dsp-W215

Squid Proxy

References · 3

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10172 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-13135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13135 · Security Note