CVE-2020-15632

8.8HIGH

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers. Authentication is not required to exploit this vulnerability.

发布于: 7/23/2020更新于: 11/21/2024
在NVD查看在MITRE查看

描述

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HNAP GetCAPTCHAsetting requests. The issue results from the lack of proper handling of sessions. An attacker can leverage this vulnerability to execute arbitrary code in the context of the device. Was ZDI-CAN-10083.

AI分析AI驱动

受影响产品

dlinkdir-842_firmware
dlinkdir-842
c

参考资料