PT-2019-3274 · D Link · D-Link Dsl-2750U
CVE-2019-1010155
·
Publicado
2019-07-23
·
Atualizado
2024-08-05
CVSS v2.0
9.4
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
D-Link DSL-2750U version 1.11
Description
The issue is related to deficiencies in the authentication procedure of the D-Link DSL-2750U router's firmware. It may allow a remote attacker to cause a denial of service or disclose protected information. The component affected is the login functionality. However, it is noted that third parties dispute the severity of this issue, arguing that although the wizard can be accessed without authentication, it cannot actually configure anything, thus potentially limiting the impact to denial of service or information leakage.
Recommendations
For D-Link DSL-2750U version 1.11, as a temporary workaround, consider restricting access to the login component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
D-Link Dsl-2750U