First published: Thu Jan 02 2020(Updated: )
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Dlink Dir-859 Firmware | <=1.05b03 | |
Dlink Dir-859 Firmware | =1.06b01-beta1 | |
Dlink Dir-859 | ||
Dlink Dir-822 Firmware | <=2.03b01 | |
Dlink Dir-822 | ||
Dlink Dir-822 Firmware | <=3.12b04 | |
Dlink Dir-823 Firmware | <=1.00b06 | |
Dlink Dir-823 | ||
Dlink Dir-865l Firmware | <=1.07b01 | |
Dlink Dir-865l | ||
Dlink Dir-868l Firmware | <=1.12b04 | |
Dlink Dir-868l | ||
Dlink Dir-868l Firmware | <=2.05b02 | |
Dlink Dir-869 Firmware | <=1.03b02 | |
Dlink Dir-869 | ||
Dlink Dir-880l Firmware | <=1.08b04 | |
Dlink Dir-880l | ||
Dlink Dir-890l Firmware | <=1.11b01 | |
Dlink Dir-890l | ||
Dlink Dir-890r Firmware | <=1.11b01 | |
Dlink Dir-890r | ||
Dlink Dir-885l Firmware | <=1.12b05 | |
Dlink Dir-885l | ||
Dlink Dir-885r Firmware | <=1.12b05 | |
Dlink Dir-885r | ||
Dlink Dir-895l Firmware | <=1.12b10 | |
Dlink Dir-895l | ||
Dlink Dir-895r Firmware | <=1.12b10 | |
Dlink Dir-895r | ||
Dlink Dir-818lx Firmware | ||
Dlink Dir-818lx |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-20213 is a vulnerability in D-Link DIR-859 routers before v1.07b03_beta that allows unauthenticated information disclosure.
CVE-2019-20213 has a severity score of 7.5, which is considered high.
The vulnerability in D-Link DIR-859 routers can be exploited by sending a request with the AUTHORIZED_GROUP=1%0a value to vpnconfig.php.
No, other D-Link routers are not affected by CVE-2019-20213.
To fix CVE-2019-20213, you should update your D-Link DIR-859 router to v1.07b03_beta or later.