CVE-2023-36090
First published: Mon Jul 31 2023(Updated: )
** UNSUPPORTED WHEN ASSIGNED ** Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dlink Dir-885l Firmware | =1.02-b01 | |
| Dlink Dir-885l | ||
| All of | ||
| Dlink Dir-885l Firmware | =1.02-b01 | |
| Dlink Dir-885l |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-36090.
What is the severity rating of CVE-2023-36090?
CVE-2023-36090 has a severity rating of 9.8 which is considered critical.
How does the vulnerability occur in D-Link DIR-885L FW102b01?
The vulnerability allows remote attackers to gain escalated privileges via phpcgi.
Which products are affected by this vulnerability?
The D-Link DIR-885L FW102b01 firmware version 1.02-b01 is affected by this vulnerability.
Is there a fix available for this vulnerability?
As this vulnerability only affects products that are no longer supported, there may not be a fix available. It is recommended to refer to the D-Link security bulletin and support for more information.
- collector/nvd-latest
- collector/nvd-index
- agent/references
- agent/author
- agent/type
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/dlink
- canonical/dlink dir-885l firmware
- version/dlink dir-885l firmware/1.02-b01
- canonical/dlink dir-885l