CVE-2019-1010155

moderate-risk
Published 2019-07-23

D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually configure anything. Thus, there is no denial of service or information leakage

Do I need to act?

-
0.58% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.1/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Dlink

References (8)

Broken Link http://www.securityfocus.com/bid/109351
Third Party Advisory https://cxsecurity.com/issue/WLB-2018080199
Exploit https://www.youtube.com/watch?v=7sk6agpcA_s
Exploit https://youtu.be/BQQbp2vn_wY
Broken Link http://www.securityfocus.com/bid/109351
Third Party Advisory https://cxsecurity.com/issue/WLB-2018080199
Exploit https://www.youtube.com/watch?v=7sk6agpcA_s
Exploit https://youtu.be/BQQbp2vn_wY
38
/ 100
moderate-risk
Severity 31/34 · Critical
Exploitability 2/34 · Minimal
Exposure 5/34 · Minimal