PT-2023-8524 · D Link · D-Link R15
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
D-Link R15 versions prior to 1.08.02
Description
The issue is related to a lack of firewall restrictions for IPv6 traffic, allowing attackers to access services running on the device that may be listening via IPv6. This can enable unauthorized access to arbitrary services.
Recommendations
For versions prior to 1.08.02, update to version 1.08.02 or later to resolve the issue. As a temporary workaround, consider restricting access to services that may be listening via IPv6 until the update is applied.
Fix
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
D-Link R15