CVE-2020-8861

8.8HIGH

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit

发布于: 2/22/2020更新于: 11/21/2024
在NVD查看在MITRE查看

描述

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of proper handling of cookies. An attacker can leverage this vulnerability to execute arbitrary code on the router. Was ZDI-CAN-9554.

AI分析AI驱动

受影响产品

dlinkdap-1330_firmware
dlinkdap-1330_firmware
1.10b01
dlinkdap-1330
-

参考资料