CVE-2019-20213: High severity d-link dir-859 vulnerability
Published Jan 2, 2020
·Updated
D-Link DIR-859 routers before v1.07b03beta allow Unauthenticated Information Disclosure via the AUTHORIZEDGROUP=1%0a value, as demonstrated by vpnconfig.php.
Affected Software
31 affected components
Dlink Dir-859 Firmware<=1.05b03
Dlink Dir-859 Firmware=1.06b01-beta1
Dlink Dir-859
Dlink Dir-822 Firmware<=2.03b01
Dlink Dir-822
Dlink Dir-822 Firmware<=3.12b04
Dlink Dir-823 Firmware<=1.00b06
Dlink Dir-823
Dlink Dir-865l Firmware<=1.07b01
Dlink Dir-865l
Dlink Dir-868l Firmware<=1.12b04
Dlink DIR-868L
Dlink Dir-868l Firmware<=2.05b02
Dlink Dir-869 Firmware<=1.03b02
Dlink Dir-869
Dlink Dir-880l Firmware<=1.08b04
Dlink Dir-880l
Dlink Dir-890l Firmware<=1.11b01
Dlink Dir-890l
Dlink Dir-890r Firmware<=1.11b01
Dlink Dir-890r
Dlink Dir-885l Firmware<=1.12b05
Dlink Dir-885l
Dlink Dir-885r Firmware<=1.12b05
Dlink Dir-885r
Dlink Dir-895l Firmware<=1.12b10
Dlink Dir-895l
Dlink Dir-895r Firmware<=1.12b10
Dlink Dir-895r
Dlink Dir-818lx Firmware
Dlink Dir-818lx
Event History
Jan 2, 2020
CVE Published
via MITRE·01:03 AM
Data Sourced
via MITRE·01:03 AM
Description
Frequently Asked Questions
1
What is CVE-2019-20213?
CVE-2019-20213 is a vulnerability in D-Link DIR-859 routers before v1.07b03_beta that allows unauthenticated information disclosure.
2
How severe is CVE-2019-20213?
CVE-2019-20213 has a severity score of 7.5, which is considered high.
3
How can the vulnerability in D-Link DIR-859 routers be exploited?
The vulnerability in D-Link DIR-859 routers can be exploited by sending a request with the AUTHORIZED_GROUP=1%0a value to vpnconfig.php.
4
Are other D-Link routers affected by CVE-2019-20213?
No, other D-Link routers are not affected by CVE-2019-20213.
5
How can I fix CVE-2019-20213?
To fix CVE-2019-20213, you should update your D-Link DIR-859 router to v1.07b03_beta or later.