Authentication Bypass in D-Link DAP-1320 Routers
CVE-2019-17505

7.5HIGH

Key Information:

Vendor

D-Link
Status
Dap-1320 A2 Firmware
Vendor
CVE Published:
11 October 2019

What is CVE-2019-17505?

D-Link DAP-1320 A2-V1.21 routers exhibit vulnerabilities due to web interfaces lacking proper authentication controls. As a result, an attacker can exploit these weaknesses to remotely access sensitive information such as the user's Wi-Fi SSID and password through files like uplink_info.xml. This exposure allows unauthorized individuals to connect to the Wi-Fi network or carry out further attacks, such as dictionary attacks.

References

https://github.com/dahua966/Routers-vuls/blob/master/DAP-...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.