Authentication flaw

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors...

CVE-2021-20694

Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restriction and to start a telnet service via unspecified vectors...

Improper access control

Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restriction and to start a telnet service via unspecified vectors...

CVE-2021-20695

Improper following of a certificate's chain of trust vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to gain root privileges via unspecified vectors...

CVE-2021-20696

DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program...

CVE-2021-20697

CVE-2021-20697 affects the D-Link DAP-1880AC firmware, where Missing authentication for a critical function allows a remote attacker to login as a low-privileged user without the access privilege via unspecified vectors. The issue is documented across multiple sources, noting that firmware versio...

CVE-2021-20697

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors...

CVE-2021-20696

CVE-2021-20696 affects D-Link DAP-1880AC firmware 1.21 and earlier. A remote authenticated attacker can send a crafted request to a CGI program to execute arbitrary OS commands, enabling remote code execution. Impact: high (CVE-2021-20696). Remediation: update to firmware 1.23 or later as per ven...

CVE-2021-20695

The CVE-2021-20695 issue affects D-Link DAP-1880AC firmware versions 1.21 and earlier. An authenticated attacker can gain root privileges through unspecified vectors. The JVN entry notes a fixed version 1.23; apply the update to mitigate. Exploitation specifics are not provided in the available d...

CVE-2021-20695

Improper following of a certificate's chain of trust vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to gain root privileges via unspecified vectors...

CVE-2021-20694

Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restriction and to start a telnet service via unspecified vectors...

CVE-2021-20694

CVE-2021-20694 affects D-Link DAP-1880AC firmware ≤1.21. It is an improper access control vulnerability that enables a remote authenticated attacker to bypass restrictions and start a Telnet service, via unspecified vectors. NVD reports CVSS‑3.1 base score 8.8 (Network, Privileges Required: Low, ...

PT-2021-14154

Name of the Vulnerable Software and Affected Versions: DAP-1880AC versions 1.21 and earlier Description: The issue is related to an improper following of a certificate's chain of trust, allowing a remote authenticated attacker to gain root privileges via unspecified vectors. Recommendations: For...

PT-2021-14156

Name of the Vulnerable Software and Affected Versions: DAP-1880AC firmware versions 1.21 and earlier Description: The issue concerns missing authentication for a critical function, allowing a remote attacker to login to the device as an authenticated user without the necessary access privilege. T...

PT-2021-14155

Name of the Vulnerable Software and Affected Versions: DAP-1880AC versions 1.21 and earlier Description: The issue allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program. Recommendations: For DAP-1880AC versions 1.2...

PT-2021-14153

Name of the Vulnerable Software and Affected Versions: DAP-1880AC versions 1.21 and earlier Description: The issue is related to improper access control, allowing a remote authenticated attacker to bypass access restrictions. This can lead to the unauthorized start of a telnet service...

CVE-2021-20695: Improper Certificate Validation

Improper following of a certificate's chain of trust vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to gain root privileges via unspecified vectors...

CVE-2021-20694: Undefined Security Weakness

Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restriction and to start a telnet service via unspecified vectors...

CVE-2021-20697: Missing Authentication for Critical Function

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors...

CVE-2021-20696: Improper Neutralization of Special Elements used in an OS Command

DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program...