PT-2020-9337 · D Link · D-Link Dap-1650

Published 2020-12-30 · Updated 2021-07-21 · CVE-2019-12768

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1650 versions v1.03b07 through v1.03b07 before 1.04B02 J65H Hot Fix However, since the start and end versions in the range are essentially the same, with the end version being more specific in terms of the hotfix, we simplify to: D-Link DAP-1650 versions prior to 1.04B02 J65H Hot Fix

Description: An issue allows attackers to bypass authentication via forceful browsing.

Recommendations: For D-Link DAP-1650 versions prior to 1.04B02 J65H Hot Fix, update to version 1.04B02 J65H Hot Fix or later to resolve the issue.

Fix

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2019-12768

Affected Products

D-Link Dap-1650

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-12768 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12768 · Vendor Advisory
• https://t.me/cvenotify/7982 · Telegram Post
• ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DAP-1650/REVA/DAP-1650_REVA_RELEASE_NOTES_v1.04B02_J65H.pdf · Note