Lucene search
HistoryAug 28, 2022 - 4:15 p.m.
CVE-2022-36755
d-link dir845l a1
authentication vulnerability
authorized_group=1
getcfg.php
cve-2022-36755
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.4%
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.
Affected configurations
Node
dlinkdir-845l_firmwareRange1.0.0–1.0.3
dlinkdir-845lMatcha1
| CPE | Name | Operator | Version |
|---|---|---|---|
| dlink:dir-845l_firmware | dlink dir-845l firmware | le | 1.0.3 |
References
Social References
More
Related
prion
prion
Authentication flaw
2022-08-28 16:15:00
nvd
nvd
CVE-2022-36755
2022-08-28 16:15:08
cvelist
cvelist
CVE-2022-36755
2022-08-28 15:44:40
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.4%
Related for CVE-2022-36755