PT-2019-3735
CVE-2019-15529
·
تاريخ النشر
2019-08-23
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
D-Link DIR-823G version V1.0.2B05
Description
The issue is related to the lack of input validation in the Username field, allowing for command injection via shell metacharacters. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information by sending a request to the "HNAP1" endpoint.
Recommendations
For version V1.0.2B05, consider disabling the HNAP1 endpoint or restricting access to it until a patch is available. Avoid using shell metacharacters in the
Username field to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾