CVEvulnerability
CVE-2019-17353
8.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-10-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-306
Description
An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.
Affected configurations
• dlink dir-615 firmware 20.05
• dlink dir-615 firmware 20.07
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://github.com/d0x0/D-Link-DIR-615/blob/master/CVE-2019-17353 Third Party Advisory
- https://us.dlink.com/en/security-advisory Vendor Advisory
- https://www.dlink.com/en/security-bulletin Vendor Advisory
- https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf Third Party Advisory, US Government Resource
- https://github.com/d0x0/D-Link-DIR-615/blob/master/CVE-2019-17353 Third Party Advisory
- https://us.dlink.com/en/security-advisory Vendor Advisory
- https://www.dlink.com/en/security-bulletin Vendor Advisory
- https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf Third Party Advisory, US Government Resource