Lucene search

MitreCVE-2019-13560

HistoryJul 11, 2019 - 3:15 p.m.

CVE-2019-13560

2019-07-1115:15:11

CWE-255

mitre

web.nvd.nist.gov

cve-2019-13560

d-link

dir-655

remote attackers

blank password

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.009

Percentile

82.6%

JSON

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi setup_wizard parameter.

Affected configurations

Nvd

Node

dlinkdir-655_firmwareMatch3.02b05

AND

dlinkdir-655Matchc1

VendorProductVersionCPE
dlinkdir-655_firmware3.02b05cpe:2.3:o:dlink:dir-655_firmware:3.02b05:*:*:*:*:*:*:*
dlinkdir-655c1cpe:2.3:h:dlink:dir-655:c1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dlink	dir-655_firmware	3.02b05	cpe:2.3:o:dlink:dir-655_firmware:3.02b05:::::::*
dlink	dir-655	c1	cpe:2.3:h:dlink:dir-655:c1:::::::*

References

ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf

www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/setupwizard.txt

www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.009

Percentile

82.6%

JSON

Related for CVE-2019-13560