D-Link DNR-326 CVE-2014-7858 Authentication Bypass Vulnerability
BID:74886
CVE-2014-7858 |Info
D-Link DNR-326 CVE-2014-7858 Authentication Bypass Vulnerability
| Bugtraq ID: | 74886 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-7858 |
| Remote: | Yes |
| Local: | No |
| Published: | May 28 2015 12:00AM |
| Updated: | May 28 2015 12:00AM |
| Credit: | Search-Laboratory Ltd. |
| Vulnerable: |
D-Link DNR-326 1.40b03 |
| Not Vulnerable: |
D-Link DNR-326 2.10.B03 |
Discussion
D-Link DNR-326 CVE-2014-7858 Authentication Bypass Vulnerability
D-Link DNR-326 is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and gain unauthorized access. This may aid in further attacks.
D-Link DNR-326 is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and gain unauthorized access. This may aid in further attacks.
Exploit / POC
D-Link DNR-326 CVE-2014-7858 Authentication Bypass Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
D-Link DNR-326 CVE-2014-7858 Authentication Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
D-Link DNR-326 CVE-2014-7858 Authentication Bypass Vulnerability
References:
References:
- D-Link Homepage (D-Link)
- DNR-326 Product Page (D-Link)
- MULTIPLE VULNERABILI TIES IN D - LINK DNS - 320, 320L, 327L , AND DNR - 326 DEVI (SEARCH-LAB Ltd)