Lucene search

CVE-2018-12103

🗓️ 05 Jul 2018 20:00:29Reported by mitreType

An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices (all hardware revisions). Due to the predictability of the /docs/captcha_(number).jpeg URI, an attacker can disclose the CAPTCHAs used by the access point and can elect to load the CAPTCHA of their choosing, leading to unauthorized login attempts

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2018-12103	5 Jul 201820:00	–	cvelist
Prion	Design/Logic Flaw	5 Jul 201820:29	–	prion
NVD	CVE-2018-12103	5 Jul 201820:29	–	nvd

Nvd

Node

dlink dir-890l_firmwareRange≤1.21b02beta01

AND

dlink dir-890lMatch-

Node

d-link dir-885l\/r_firmwareRange≤1.21b03beta01

AND

d-link dir-885\/rMatch-

Node

d-link dir-895l\/r_firmwareRange≤1.21b04beta01

AND

d-link dir-895\/rMatch-

Source	Link
seclists	www.seclists.org/fulldisclosure/2018/Jul/13
securityadvisories	www.securityadvisories.dlink.com/announcement/publication.aspx

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jul 2018 20:29Current

6.4Medium risk

Vulners AI Score6.4

CVSS23.3

CVSS36.5

EPSS0.00065

CWE-863