D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HDlink Dir 815
HWDlinkwszystkie wersjeDlink Dir 815 Firmware
OSDlink< 2.07.b01
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2018-25115CRITICAL10.0PL ✓ten sam produkt
D-Link DIR-series — nieuwierzytelniony command injection w service.cgi (root RCE)
CVE-2024-22651CRITICAL9.8PL ✓ten sam produkt
Command injection w routerze D-Link DIR-815 — podatność krytyczna (CVSS 9.8)
CVE-2023-51123CRITICAL9.8PL ✓ten sam produkt
RCE w D-Link DIR-815 via command injection w soapcgi_main
CVE-2018-10106CRITICAL9.8ten sam produkt
D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission byp...
CVE-2014-8888CRITICAL9.8ten sam produkt
The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote atta...