7.5

CVE-2018-14080

An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to download the configuration file.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
D-link ≫ Dir-809 A1 Firmware Version <= 1.09
   Dlink ≫ Dir-809
D-link ≫ Dir-809 A2 Firmware Version <= 1.11
   Dlink ≫ Dir-809
D-link ≫ Dir-809 Guestzone Firmware Version <= 1.09
   Dlink ≫ Dir-809
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.76% 0.71
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.