CVE-2019-7389: High severity d-link dir-823g firmware vulnerability

Published Feb 5, 2019

Updated

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote attackers to reset the router without authentication via the SetFactoryDefault HNAP API. Consequently, an attacker can achieve a denial-of-service attack without authentication.

Affected Software

4 affected components

Dlink Dir-823g Firmware=1.02b03

Dlink Dir-823g

All of the following

Dlink Dir-823g Firmware=1.02b03

Dlink Dir-823g

Event History

Feb 5, 2019

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·12:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2019-7389?

CVE-2019-7389 is an issue discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03.

What is the severity of CVE-2019-7389?

The severity of CVE-2019-7389 is high with a CVSS score of 7.5.

How can remote attackers exploit CVE-2019-7389?

Remote attackers can exploit CVE-2019-7389 by resetting the router without authentication via the SetFactoryDefault HNAP API.

What is the impact of CVE-2019-7389?

The impact of CVE-2019-7389 is a denial-of-service attack, where an attacker can reset the D-Link DIR-823G router without authentication.

Are D-Link DIR-823G devices with firmware version 1.02B03 vulnerable to CVE-2019-7389?

Yes, D-Link DIR-823G devices with firmware version 1.02B03 are vulnerable to CVE-2019-7389.