Design/Logic Flaw

2019-02-1704:29:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API to the web service provided by /bin/goahead.

CPENameOperatorVersion
dir-823g_firmwareeq1.2.0-b3

CPE	Name	Operator	Version
	dir-823g_firmware	eq	1.2.0-b3

References

github.com/leonW7/D-Link/blob/master/Vul_6.md