Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-17353

An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.

Published

2019-10-09T12:15:10.467

Last Modified

2024-11-21T04:32:09.230

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.2 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

4.9

Weaknesses

Type: Primary
CWE-306

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	dlink	dir-615_firmware	20.05	Yes
Operating System	dlink	dir-615_firmware	20.07	Yes
Hardware	dlink	dir-615	-	No

References

https://github.com/d0x0/D-Link-DIR-615/blob/master/CVE-2019-17353 Third Party Advisory ([email protected])
https://us.dlink.com/en/security-advisory Vendor Advisory ([email protected])
https://www.dlink.com/en/security-bulletin Vendor Advisory ([email protected])
https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf Third Party Advisory, US Government Resource ([email protected])
https://github.com/d0x0/D-Link-DIR-615/blob/master/CVE-2019-17353 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://us.dlink.com/en/security-advisory Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.dlink.com/en/security-bulletin Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)