Information disclosure

2023-03-3119:15:00

PRIOn knowledge base

www.prio-n.com

d-link dir-882

syslog

information disclosure

vulnerability

sensitive information

7.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

JSON

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information.

CPENameOperatorVersion
dir-882_firmwareeq1.30

CPE	Name	Operator	Version
	dir-882_firmware	eq	1.30

References

github.com/laotun-s/POC/blob/main/CVE-2023-26925.txt

www.dlink.com/en/security-bulletin/