Information Disclosure Vulnerability in D-Link DIR-825 Router
CVE-2019-9126

7.5HIGH

Key Information:

Vendor
D-Link
Status
Dir-825 Rev.b Firmware
Vendor
CVE Published:
25 February 2019

Summary

An information disclosure vulnerability exists in the D-Link DIR-825 Rev.B 2.10 router, where unauthorized requests to the router_info.xml document can expose sensitive information. This data leak may reveal the device's PIN code, MAC address, firmware version, routing table, QOS settings, and both LAN and WLAN configurations, potentially allowing attackers to exploit the device or its network.

References

https://github.com/WhooAmii/whooamii.github.io/blob/maste...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.