CVE-2017-3191

EPSS 62.5%CWE-294

Vexday Risk Score

15Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 62.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 dez 2017Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages such as tools_admin.asp without credentials.

Produtos afetados

D-Link · DIR-130 D-Link · DIR-330

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/123293 https://www.kb.cert.org/vuls/id/553503 https://www.scmagazine.com/d-link-dir-130-and-dir-330-routers-vulnerable/article/644553/https://www.wilderssecurity.com/threads/d-link-dir-130-and-dir-330-are-vulnerable-to-authentication-bypass-and-do-not-protect-credentials.392703/