ByteOS Network

NVD Vulnerability Details :

CVE-2018-20674

Analyzed

Source-cve@mitre.org

Published At-09 Jan, 2019 | 00:29

Updated At-03 Oct, 2019 | 00:03

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

CPE Matches

D-Link Corporation

>>dir-822_firmware>>Versions up to 3.10b06(inclusive)

cpe:2.3:o:dlink:dir-822_firmware:*:*:*:*:*:*:*:*

D-Link Corporation

>>dir-822>>-

cpe:2.3:h:dlink:dir-822:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-822-us_firmware>>Versions up to 3.10b06(inclusive)

cpe:2.3:o:dlink:dir-822-us_firmware:*:*:*:*:*:*:*:*

D-Link Corporation

>>dir-822-us>>-

cpe:2.3:h:dlink:dir-822-us:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-850l_firmware>>Versions up to 1.21b07(inclusive)

cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*

D-Link Corporation

>>dir-850l>>-

cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-850l_firmware>>Versions up to 2.21b01(inclusive)

cpe:2.3:o:dlink:dir-850l_firmware:*:*:*:*:*:*:*:*

D-Link Corporation

>>dir-850l_firmware>>2.22b02

cpe:2.3:o:dlink:dir-850l_firmware:2.22b02:beta:*:*:*:*:*:*

D-Link Corporation

>>dir-850l>>-

cpe:2.3:h:dlink:dir-850l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-880l_firmware>>Versions up to 1.07.b08(inclusive)

cpe:2.3:o:dlink:dir-880l_firmware:*:*:*:*:*:*:*:*

D-Link Corporation

>>dir-880l_firmware>>1.20b01

cpe:2.3:o:dlink:dir-880l_firmware:1.20b01:beta:*:*:*:*:*:*

D-Link Corporation

>>dir-880l>>-

cpe:2.3:h:dlink:dir-880l:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10101	cve@mitre.org	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History