CVE-2018-12103

🗓️ 05 Jul 2018 20:00:00Reported by mitreType

An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices (all hardware revisions). Due to the predictability of the /docs/captcha_(number).jpeg URI, an attacker can disclose the CAPTCHAs used by the access point and can elect to load the CAPTCHA of their choosing, leading to unauthorized login attempts

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerability of the CAPTCHA technology (Completely Automated Public Turing Test to Tell Computers and Humans Apart) affects the microprogrammable router devices D-Link DIR-890L, DIR-885L/R, and DIR-895L/R, allowing hackers to bypass security restrictions.	31 May 202300:00	–	bdu_fstec
CNVD	D-Link DIR-890L A2 Improper Access Control Vulnerability	4 Jul 201800:00	–	cnvd
Cvelist	CVE-2018-12103	5 Jul 201820:00	–	cvelist
EUVD	EUVD-2018-4082	7 Oct 202500:30	–	euvd
NVD	CVE-2018-12103	5 Jul 201820:29	–	nvd
OSV	CVE-2018-12103	5 Jul 201820:29	–	osv
Prion	Design/Logic Flaw	5 Jul 201820:29	–	prion
Positive Technologies	PT-2018-3888 · D Link · D-Link Dir-895L/R +2	10 Jun 201800:00	–	ptsecurity