Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

CVE-2021-34860

The CVE-2021-34860 issue affects D-Link DAP-2020 routers (version 1.01rc001) and is a directory traversal flaw in the webproc getpage endpoint. The vulnerability arises from insufficient validation of a user-supplied path used in file operations, enabling network-adjacent attackers to disclose se...