Lucene search
K

17 matches found

CNVD
CNVD
added 2025/12/18 12:0 a.m.4 views

D-Link DIR-803 Information Disclosure Vulnerability

The D-Link DIR-803 is a wireless router from China's AUO D-Link. The D-Link DIR-803 suffers from an information disclosure vulnerability that originates from the incorrect operation of the parameter AUTHORIZEDGROUP in the file /getcfg.php of the component Configuration Handler, which can be...

7.5CVSS5.1AI score0.03559EPSS
Exploits1References1
OSV
OSV
added 2025/12/11 5:15 p.m.5 views

CVE-2025-14528

A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...

7.5CVSS5.4AI score0.03559EPSS
Exploits1References6
NVD
NVD
added 2025/12/11 5:15 p.m.5 views

CVE-2025-14528

A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...

7.5CVSS0.03559EPSS
Exploits1References6
CVE
CVE
added 2025/12/11 5:2 p.m.28 views

CVE-2025-14528

The CVE-2025-14528 issue affects D-Link DIR-803 routers (firmware up to 1.04, A1 era). A vulnerability in the Configuration Handler’s /getcfg.php allows manipulation of the AUTHORIZED_GROUP parameter via newline injection, resulting in an authentication bypass and exposure of administrator creden...

7.5CVSS5.1AI score0.03559EPSS
In wildExploits1References6Affected Software1
EUVD
EUVD
added 2025/12/11 5:2 p.m.3 views

EUVD-2025-202757

A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...

6.9CVSS5AI score0.03559EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.10 views

PT-2025-50639

Name of the Vulnerable Software and Affected Versions D-Link DIR-803 versions prior to 1.05 Description A flaw exists in D-Link DIR-803, potentially leading to information disclosure. The issue resides within the Configuration Handler component, specifically in the /getcfg.php file. Manipulation ...

7.5CVSS5.8AI score0.03559EPSS
Exploits1References13
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.3 views

D-Link DIR-803 安全漏洞

The D-Link DIR-803 is a wireless router from China's AUO D-Link. The D-Link DIR-803 suffers from an information disclosure vulnerability that originates from the incorrect operation of the parameter AUTHORIZEDGROUP in the file /getcfg.php of the component Configuration Handler, which can be...

7.5CVSS5AI score0.03559EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2024/05/13 12:0 a.m.3 views

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows a hacker to bypass security restrictions and gain increased privileges.

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software exposes a flaw in access control when processing the $GLOBALS"AUTHORIZEDGROUP" parameter. Exploiting this vulnerability allows an attacker to bypass security restrictions and enhance their privileges...

5.8CVSS5.5AI score0.00741EPSS
Exploits0References3Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2023/11/17 12:0 a.m.3 views

VulnCheck KEV: CVE-2019-17506

There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's username and password and other information via a DEVICE.ACCOUNT value for SERVICES in conjunction with AUTHORIZEDGROUP=1%0a to...

10CVSS7.2AI score0.57298EPSS
Exploits1References1
OSV
OSV
added 2022/08/28 4:15 p.m.2 views

CVE-2022-36755

D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...

9.8CVSS5.8AI score0.0107EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/28 4:15 p.m.2 views

CVE-2022-36755

D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...

9.8CVSS5.8AI score0.0107EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/08/28 12:0 a.m.2 views

D-Link DIR-845 授权问题漏洞

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR845L version A1, which stems from an authentication vulnerability containing an AUTHORIZEDGROUP=1 value...

9.8CVSS7.1AI score0.0107EPSS
Exploits1References3
OSV
OSV
added 2020/01/02 2:16 p.m.3 views

CVE-2019-20213

D-Link DIR-859 routers before v1.07b03beta allow Unauthenticated Information Disclosure via the AUTHORIZEDGROUP=1%0a value, as demonstrated by vpnconfig.php...

7.5CVSS7.1AI score0.01948EPSS
Exploits0References4
CNVD
CNVD
added 2020/01/02 12:0 a.m.2 views

D-Link DIR-859 Information Disclosure Vulnerability

The D-Link DIR-859 is a wireless AC1750 high power Wi-Fi Gigabit router. An information disclosure vulnerability exists in D-Link DIR-859 versions prior to 1.07b03beta, which can be exploited by an attacker to obtain information via the AUTHORIZEDGROUP=1%0a value...

7.5CVSS6.3AI score0.01948EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/02/15 12:0 a.m.31 views

TrendNet Routers AUTHORIZED_GROUP Information Disclosure Vulnerability

TrendNet router devices are vulnerable to information disclosure vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

7.5CVSS7.6AI score0.02068EPSS
Exploits1References1
OSV
OSV
added 2018/02/14 4:29 p.m.1 views

CVE-2018-7034

TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...

7.5CVSS5.8AI score0.02068EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2018/02/14 12:0 a.m.2 views

PT-2018-17862 · Trendnet · Trendnet Tew-752Dru +2

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-751DR version 1.03B03 TRENDnet TEW-752DRU version 1.03B01 TRENDnet TEW-733GR version 1.03B01 Description: The issue allows authentication bypass via an AUTHORIZED GROUP=1 value. This can be demonstrated by sending a request for...

7.5CVSS7.6AI score0.02068EPSS
Exploits1References3
Rows per page
Query Builder