PT-2020-14692 · D Link · D-Link Dir-816L

Published 2020-07-22 · Updated 2023-11-08 · CVE-2020-15894

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-816L devices versions 2.x before 1.10b04Beta02

Description An issue exists where an exposed administration function in "getcfg.php" can be used to call various services, potentially allowing an attacker to retrieve sensitive information, such as admin login credentials, by manipulating the POST SERVICES variable in the query string to DEVICE.ACCOUNT.

Recommendations For D-Link DIR-816L devices versions 2.x before 1.10b04Beta02, update to version 1.10b04Beta02 or later to resolve the issue. As a temporary workaround, consider restricting access to the "getcfg.php" file to minimize the risk of exploitation. Avoid using the POST SERVICES variable in the affected API endpoint until the issue is resolved.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-15894

Affected Products

D-Link Dir-816L

References · 5

• https://osv.dev/vulnerability/CVE-2020-15894 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15894 · Security Note
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10169 · Vendor Advisory
• https://t.me/true_secator/3813 · Telegram Post
• https://research.loginsoft.com/bugs/multiple-vulnerabilities-discovered-in-the-d-link-firmware-dir-816l · Note