Password Disclosure Vulnerability in D-Link DSL-2875AL Devices

CVE-2019-15655

Summary

The D-Link DSL-2875AL device is susceptible to a password disclosure vulnerability due to a flaw in its web management interface. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to the device, which fails to adequately protect the configuration file. This request can lead to the exposure of sensitive information, including passwords that are stored in cleartext, thereby allowing unauthorized access to the device's management functionalities. It is crucial for users to update their devices to mitigate this risk effectively.

References