Multiple D-Link Products Multiple Security Vulnerabilities
BID:70995
Info
Multiple D-Link Products Multiple Security Vulnerabilities
| Bugtraq ID: | 70995 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 21 2014 12:00AM |
| Updated: | Aug 21 2014 12:00AM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
D-Link DIR-836L 1.03 D-Link DIR-826L 1.04b05 D-Link DIR-636L 1.03 D-Link DIR-626L 1.03 |
| Not Vulnerable: |
D-Link DIR-836L 1.04b09 D-Link DIR-826L 1.05b06 D-Link DIR-636L 1.05b07 D-Link DIR-626L 1.04b04 |
Discussion
Multiple D-Link Products Multiple Security Vulnerabilities
Multiple D-Link Products are prone to the following security vulnerabilities:
1. An authentication-bypass vulnerability
2. A directory-traversal vulnerability
3. A cross-site request-forgery vulnerability
4. An user-enumeration weakness
An attacker can exploit these issues to perform certain unauthorized actions, bypass-authentication mechanisms, or gain access to potentially sensitive information. This may lead to further attacks.
Multiple D-Link Products are prone to the following security vulnerabilities:
1. An authentication-bypass vulnerability
2. A directory-traversal vulnerability
3. A cross-site request-forgery vulnerability
4. An user-enumeration weakness
An attacker can exploit these issues to perform certain unauthorized actions, bypass-authentication mechanisms, or gain access to potentially sensitive information. This may lead to further attacks.
Exploit / POC
Multiple D-Link Products Multiple Security Vulnerabilities
An attacker can exploit these issues through readily available tools and a browser.
An attacker can exploit these issues through readily available tools and a browser.