ByteOS Network

NVD Vulnerability Details :

CVE-2017-9542

Deferred

Source-cve@mitre.org

Published At-11 Jun, 2017 | 23:29

Updated At-20 Apr, 2025 | 01:37

D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation of this issue allows an attacker to take control of the affected device.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

D-Link Corporation

>>dir-615_firmware>>*

cpe:2.3:o:d-link:dir-615_firmware:*:*:*:*:*:*:*:*

D-Link Corporation

>>dir-615>>-

cpe:2.3:h:dlink:dir-615:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/98992	cve@mitre.org	Third Party Advisory VDB Entry
https://twitter.com/tiger_tigerboy/status/873458088321220609	cve@mitre.org	Third Party Advisory
https://www.facebook.com/tigerBOY777/videos/1368513696568992/	cve@mitre.org	Permissions Required
http://www.securityfocus.com/bid/98992	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://twitter.com/tiger_tigerboy/status/873458088321220609	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://www.facebook.com/tigerBOY777/videos/1368513696568992/	af854a3a-2127-422b-91ae-364da2661108	Permissions Required

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History