CVE-2018-17881: Critical severity d-link dir-823g firmware vulnerability
Published Oct 3, 2018
·Updated
On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change.
Affected Software
2 affected components
D-Link Dir-823g Firmware
Dlink Dir-823g
Event History
Oct 3, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-17881?
CVE-2018-17881 is a vulnerability found on D-Link DIR-823G 2018-09-19 devices where the GoAhead configuration allows unauthorized users to change the admin password.
2
How severe is CVE-2018-17881?
CVE-2018-17881 has a severity rating of 9.8 (critical).
3
What is the affected software for CVE-2018-17881?
The affected software for CVE-2018-17881 is D-Link DIR-823G Firmware.
4
How can I fix CVE-2018-17881?
To fix CVE-2018-17881, it is recommended to update the firmware of the D-Link DIR-823G device to the latest version.
5
Where can I find more information about CVE-2018-17881?
You can find more information about CVE-2018-17881 at the following link: [https://xz.aliyun.com/t/2834#toc-5]