ByteOS Network

NVD Vulnerability Details :

CVE-2019-1010155

Modified

Source-josh@bress.net

Published At-23 Jul, 2019 | 14:15

Updated At-17 May, 2024 | 01:31

D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually configure anything. Thus, there is no denial of service or information leakage

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Primary	2.0	6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:P

CPE Matches

D-Link Corporation

>>dsl-2750u_firmware>>1.11

cpe:2.3:o:dlink:dsl-2750u_firmware:1.11:*:*:*:*:*:*:*

D-Link Corporation

>>dsl-2750u>>-

cpe:2.3:h:dlink:dsl-2750u:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/109351	josh@bress.net	Broken Link Third Party Advisory VDB Entry
https://cxsecurity.com/issue/WLB-2018080199	josh@bress.net	Third Party Advisory
https://www.youtube.com/watch?v=7sk6agpcA_s	josh@bress.net	Exploit Third Party Advisory
https://youtu.be/BQQbp2vn_wY	josh@bress.net	Exploit Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History