Unauthenticated Information Disclosure in D-Link DIR-859 Routers

CVE-2019-20213

Summary

D-Link DIR-859 routers prior to version v1.07b03_beta are susceptible to an unauthenticated information disclosure vulnerability. This flaw allows attackers to exploit the router by sending specially crafted requests that reveal sensitive information. Specifically, the vulnerability can be triggered via the AUTHORIZED_GROUP parameter, enabling unauthorized access to potentially critical configuration details. Users of affected models are urged to update their firmware to the latest version to mitigate this security risk.

References