Back to feed
EUVD-2021-29591 · Published Aug 23, 2022
The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page.
Technologies
Dlink Dir-615 J1 FirmwareDlink Dir-615Dlink Dir-615Jx10 FirmwareDlink Dir-615 T1Dlink Dir-615 J1Dlink Dir-615Jx10Dlink Dir-615 FirmwareDlink Dir-615 T1 Firmware
Weaknesses
NVD-CWE-Other
CVSS scores
- v3.19.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
