PT-2020-9914
CVE-2019-17525
·
Published
2020-04-21
·
Updated
2020-06-04
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
D-Link DIR-615 T1 version 20.10
Description
The issue allows remote attackers to bypass the CAPTCHA protection mechanism on the login page, enabling them to conduct brute-force attacks.
Recommendations
For D-Link DIR-615 T1 version 20.10, consider temporarily disabling the login page or restricting access to it until a patch is available to prevent brute-force attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾