Lucene search

ZdiCVE-2020-27863

HistoryFeb 12, 2021 - 12:15 a.m.

CVE-2020-27863

2021-02-1200:15:12

CWE-287

CWE-288

zdi

web.nvd.nist.gov

cve-2020-27863

network-adjacent attackers

d-link

dva-2800

dsl-2888a

routers

dhttpd service

tcp port 8008

incorrect string matching logic

stored credentials disclosure

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

60.9%

JSON

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by default. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-10912.

Affected configurations

Nvd

Vulners

Node

dlinkdva-2800_firmwareMatch2.30_au

AND

dlinkdva-2800Matchrevision_t

Node

dlinkdsl-2888a_firmwareMatch2.30_au

AND

dlinkdsl-2888aMatchrevision_t

VendorProductVersionCPE
dlinkdva-2800_firmware2.30_aucpe:2.3:o:dlink:dva-2800_firmware:2.30_au:*:*:*:*:*:*:*
dlinkdva-2800revision_tcpe:2.3:h:dlink:dva-2800:revision_t:*:*:*:*:*:*:*
dlinkdsl-2888a_firmware2.30_aucpe:2.3:o:dlink:dsl-2888a_firmware:2.30_au:*:*:*:*:*:*:*
dlinkdsl-2888arevision_tcpe:2.3:h:dlink:dsl-2888a:revision_t:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dlink	dva-2800_firmware	2.30_au	cpe:2.3:o:dlink:dva-2800_firmware:2.30_au:::::::*
dlink	dva-2800	revision_t	cpe:2.3:h:dlink:dva-2800:revision_t:::::::*
dlink	dsl-2888a_firmware	2.30_au	cpe:2.3:o:dlink:dsl-2888a_firmware:2.30_au:::::::*
dlink	dsl-2888a	revision_t	cpe:2.3:h:dlink:dsl-2888a:revision_t:::::::*

CNA Affected

[
  {
    "product": "Multiple Routers",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "firmeware version 2.3"
      }
    ]
  }
]

References

supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10196

www.zerodayinitiative.com/advisories/ZDI-20-1427/

Social References

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

60.9%

JSON

Related for CVE-2020-27863