PT-2020-14694 · D Link · D-Link Dap-1522

Published 2020-07-22 · Updated 2020-07-27 · CVE-2020-15896

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions D-Link DAP-1522 devices versions 1.4x through 1.10b04Beta01

Description An authentication-bypass issue allows unauthorized users to access certain pages directly. This is due to the checking of the NO NEED AUTH value. If NO NEED AUTH is set to 1, users can access webpages without authentication. By appending ?NO NEED AUTH=1 to protected URLs, such as "logout.php" and "login.php", unauthorized users can bypass authentication.

Recommendations For D-Link DAP-1522 devices versions 1.4x through 1.10b04Beta01, update to version 1.10b04Beta02 or later to resolve the issue. As a temporary workaround, consider restricting access to the logout.php and login.php pages, and avoid using the NO NEED AUTH parameter in protected URLs until the issue is resolved.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-15896

Affected Products

D-Link Dap-1522

References · 4

• https://osv.dev/vulnerability/CVE-2020-15896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15896 · Security Note
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10169 · Vendor Advisory
• https://research.loginsoft.com/bugs/authentication-bypass-in-d-link-firmware-dap-1522 · Note