Authentication Bypass in D-Link DSL-2750U by D-Link
CVE-2019-1010155
9.1CRITICAL
Summary
The D-Link DSL-2750U version 1.11 is susceptible to an authentication bypass vulnerability that allows unauthorized access to its login component. Although the access to the wizard does not permit actual configuration, it raises concerns about potential denial of service and information leakage. The community remains divided on the severity of this issue, suggesting that while third-party testing indicates limited exploitability, any unregulated access to network devices can pose a security risk.
Affected Version(s)
DSL-2750U 1.11
References
CVSS V3.1
Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved