CVE-2019-19598: High severity d-link dap-1860 firmware vulnerability
D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAPAUTH header timestamp value. In HTTP requests, part of the HNAPAUTH header is the timestamp used to determine the time when the user sent the request. If this value is equal to the value stored in the device's /var/hnap/timestamp file, the request will pass the HNAPAUTH check function.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19598?
CVE-2019-19598 is a vulnerability in D-Link DAP-1860 devices that allows access to administrator functions without authentication.
How does CVE-2019-19598 work?
CVE-2019-19598 allows unauthorized access by bypassing authentication via the HNAP_AUTH header timestamp value.
Is my D-Link DAP-1860 device affected by CVE-2019-19598?
If you are using D-Link DAP-1860 devices before v1.04b03 Beta, your device may be affected by CVE-2019-19598.
How can I fix CVE-2019-19598?
To fix CVE-2019-19598, you should update your D-Link DAP-1860 device to version v1.04b03 Beta or later.
What is the severity of CVE-2019-19598?
CVE-2019-19598 has a severity rating of 8.8 (high).