Lucene search

K
nvd[email protected]NVD:CVE-2023-26925
HistoryMar 31, 2023 - 7:15 p.m.

CVE-2023-26925

2023-03-3119:15:07
web.nvd.nist.gov
cve-2023-26925
d-link dir-882
syslog
information disclosure
network request
sensitive information

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information.

Affected configurations

NVD
Node
dlinkdir-882_firmwareMatch1.30
AND
dlinkdir-882Match-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

Related for NVD:CVE-2023-26925