Lucene search

MitreCVE-2019-19743

HistoryDec 16, 2019 - 5:15 p.m.

CVE-2019-19743

2019-12-1617:15:12

mitre

web.nvd.nist.gov

cve

2019

19743

d-link

dir-615

unauthorized access

security vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.004

Percentile

73.8%

JSON

On D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link portal.

Affected configurations

Nvd

Node

dlinkdir-615_t1_firmwareMatch20.07

AND

dlinkdir-615_t1Match-

VendorProductVersionCPE
dlinkdir-615_t1_firmware20.07cpe:2.3:o:dlink:dir-615_t1_firmware:20.07:*:*:*:*:*:*:*
dlinkdir-615_t1-cpe:2.3:h:dlink:dir-615_t1:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dlink	dir-615_t1_firmware	20.07	cpe:2.3:o:dlink:dir-615_t1_firmware:20.07:::::::*
dlink	dir-615_t1	-	cpe:2.3:h:dlink:dir-615_t1:-:::::::*

References

seclists.org/fulldisclosure/2019/Dec/35

pastebin.com/wHiRGdEG

www.dlink.com/en/security-bulletin

www.exploit-db.com/exploits/47778

www.infosecsanyam.blogspot.com/2019/12/d-link-dir-615-wireless-routervertical.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.004

Percentile

73.8%

JSON

Related for CVE-2019-19743