Insufficient Compartmentalization in D-link DIR-825AC G1 Devices
CVE-2019-13265

8.8HIGH

Key Information:

Vendor

D-Link
Status
Dir-825\/ac G1 Firmware
Vendor
CVE Published:
27 August 2019

What is CVE-2019-13265?

D-Link DIR-825AC G1 devices exhibit a significant security flaw due to insufficient segmentation between their host and guest networks. This vulnerability allows ARP requests to be forwarded without restrictions, enabling broadcasting of messages that can potentially be intercepted by devices on the guest network. Attackers can exploit this weakness to issue ARP requests targeting arbitrary devices on the network, thus creating a covert communication channel that could compromise sensitive data. Unlike more secure routers that limit ARP traffic to specific subnet masks, the DIR-825AC G1 fails to employ such restrictions, posing serious risks to network integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://orenlab.sise.bgu.ac.il/publications/CrossRouter
x_refsource_MISC
https://www.usenix.org/system/files/woot19-paper_ovadia.pdf
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.