PT-2020-2907 · D Link · D-Link Dir-865L

·

CVE-2020-13786

·

Published

2020-06-03

·

Updated

2022-09-02

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions D-Link DIR-865L Ax version 1.20B01 Beta
Description The issue is related to the lack of protection against cross-site request forgery (CSRF) in the web interface of the D-Link DIR-865L router's firmware. This can allow a remote attacker to modify, add, or delete data.
Recommendations For D-Link DIR-865L Ax version 1.20B01 Beta, consider disabling access to the web interface until a patch is available to prevent potential exploitation. Restrict access to the router's configuration to minimize the risk of unauthorized changes.

Exploit

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2020-03064
CVE-2020-13786

Affected Products

D-Link Dir-865L