CVE-2019-17511 - There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers

Back Back to CVE browser

HIGH

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers

Published Oct 14, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.59%

Description

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can get the router's log file via log_get.php, which could be used to discover the intranet network structure.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7864
Advisory
https://github.com/dahua966/Routers-vuls
x_refsource_MISCThird Party Advisory
https://github.com/dahua966/Routers-vuls/blob/master/DIR-412/vuls_info.md
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7864		Advisory
https://github.com/dahua966/Routers-vuls		x_refsource_MISCThird Party Advisory
https://github.com/dahua966/Routers-vuls/blob/master/DIR-412/vuls_info.md		x_refsource_MISCExploitThird Party Advisory