CVE-2019-7642
First published: Mon Mar 25 2019(Updated: )
D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dlink Dir-817lw Firmware | =1.04 | |
| Dlink Dir-817lw | =a1 | |
| Dlink Dir-816l Firmware | =2.06 | |
| Dlink Dir-816l | =b1 | |
| Dlink Dir-816 Firmware | =2.06 | |
| Dlink DIR-816 | =b1 | |
| Dlink Dir-850l Firmware | =1.09 | |
| Dlink Dir-850l | =a1 | |
| Dlink Dir-868l Firmware | =1.10 | |
| Dlink Dir-868l | =a1 | |
| All of | ||
| Dlink Dir-817lw Firmware | =1.04 | |
| Dlink Dir-817lw | =a1 | |
| All of | ||
| Dlink Dir-816l Firmware | =2.06 | |
| Dlink Dir-816l | =b1 | |
| All of | ||
| Dlink Dir-816 Firmware | =2.06 | |
| Dlink DIR-816 | =b1 | |
| All of | ||
| Dlink Dir-850l Firmware | =1.09 | |
| Dlink Dir-850l | =a1 | |
| All of | ||
| Dlink Dir-868l Firmware | =1.10 | |
| Dlink Dir-868l | =a1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-7642?
CVE-2019-7642 is a vulnerability that affects D-Link routers with the mydlink feature, allowing attackers to remotely obtain users' DNS query logs and login logs.
Which D-Link routers are affected by CVE-2019-7642?
D-Link routers with the mydlink feature, specifically the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816, DIR-850L, and DIR-868L are affected by CVE-2019-7642.
How severe is CVE-2019-7642?
CVE-2019-7642 has a severity rating of 7.5 (high).
How can I fix CVE-2019-7642?
To fix CVE-2019-7642, make sure to update your D-Link router firmware to the latest version provided by the vendor.
Where can I find more information about CVE-2019-7642?
More information about CVE-2019-7642 can be found at the following link: [https://github.com/xw77cve/CVE-2019-7642/blob/master/README.md](https://github.com/xw77cve/CVE-2019-7642/blob/master/README.md)
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/references
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/dlink
- canonical/dlink dir-817lw firmware
- version/dlink dir-817lw firmware/1.04
- canonical/dlink dir-817lw
- version/dlink dir-817lw/a1
- canonical/dlink dir-816l firmware
- version/dlink dir-816l firmware/2.06
- canonical/dlink dir-816l
- version/dlink dir-816l/b1
- canonical/dlink dir-816 firmware
- version/dlink dir-816 firmware/2.06
- canonical/dlink dir-816
- version/dlink dir-816/b1
- canonical/dlink dir-850l firmware
- version/dlink dir-850l firmware/1.09
- canonical/dlink dir-850l
- version/dlink dir-850l/a1
- canonical/dlink dir-868l firmware
- version/dlink dir-868l firmware/1.10
- canonical/dlink dir-868l
- version/dlink dir-868l/a1