Lucene search

MitreCVE-2019-7390

HistoryFeb 05, 2019 - 12:29 a.m.

CVE-2019-7390

2019-02-0500:29:00

CWE-306

mitre

web.nvd.nist.gov

cve-2019-7390

d-link

dir-823g

firmware

access control

remote attack

dns hijacking

authentication

setwansettings

hnap api

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

8.5

Confidence

High

EPSS

0.002

Percentile

53.4%

JSON

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to hijack the DNS service configuration of all clients in the WLAN, without authentication, via the SetWanSettings HNAP API.

Affected configurations

Nvd

Node

dlinkdir-823g_firmwareMatch1.02b03

AND

dlinkdir-823gMatch-

VendorProductVersionCPE
dlinkdir-823g_firmware1.02b03cpe:2.3:o:dlink:dir-823g_firmware:1.02b03:*:*:*:*:*:*:*
dlinkdir-823g-cpe:2.3:h:dlink:dir-823g:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dlink	dir-823g_firmware	1.02b03	cpe:2.3:o:dlink:dir-823g_firmware:1.02b03:::::::*
dlink	dir-823g	-	cpe:2.3:h:dlink:dir-823g:-:::::::*

References

www.securityfocus.com/bid/106855

github.com/leonW7/D-Link/blob/master/Vul_5.md

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

8.5

Confidence

High

EPSS

0.002

Percentile

53.4%

JSON

Related for CVE-2019-7390