HIGH
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php
Published Jan 2, 2020
7.5
HIGHCVSS 3.1
EPSS 2.18%
Description
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
Affected products
No data.
Configuration 1
AND
OR
- ≤ 1.05b03
- 1.06b01
Configuration 2
AND
- ≤ 2.03b01
Configuration 3
AND
- ≤ 3.12b04
Configuration 4
AND
- ≤ 1.00b06
Configuration 5
AND
- ≤ 1.07b01
Configuration 6
AND
- ≤ 1.12b04
Configuration 7
AND
- ≤ 2.05b02
Configuration 8
AND
- ≤ 1.03b02
Configuration 9
AND
- ≤ 1.08b04
Configuration 10
AND
- ≤ 1.11b01
Configuration 11
AND
- ≤ 1.11b01
Configuration 12
AND
- ≤ 1.12b05
Configuration 13
AND
- ≤ 1.12b05
Configuration 14
AND
- ≤ 1.12b10
Configuration 15
AND
- ≤ 1.12b10
Configuration 16
AND
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (4)
- https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f x_refsource_MISC
- https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-es-6540f7f55b03 x_refsource_MISC
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146 x_refsource_MISCVendor Advisory
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f | x_refsource_MISC | |
| https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-es-6540f7f55b03 | x_refsource_MISC | |
| https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146 | x_refsource_MISCVendor Advisory | |
| https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 2, 2020
Updated Aug 5, 2024
Reserved Jan 2, 2020
Link CVE-2019-20213
CISA Vulnrichment
Updated n/a