CVE-2023-36089

2023-07-3100:00:00

mitre

www.cve.org

authentication bypass

d-link dir-645

firmware

remote attackers

escalated privileges

php

maintainer not supported

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References

www.dlink.com/en/security-bulletin/

www.dlink.com/en/support