CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2015-20518.8/HIGHEPSS 97.1%CISA KEV
2015-02-23

D-Link DIR-645 Router HNAP Interface Remote Code Execution Vulnerability (CVE-2015-2051) Technical Advisory

[Affected Scope] D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a crafted GetDeviceSettings action to the HNAP interface

[Mitigation] Disable remote management, block external access to the HNAP interface, and immediately replace the End-of-Life (EoL) device with a supported model

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse