Information Disclosure Vulnerability in D-Link DIR-615 Router
CVE-2021-40654

6.5MEDIUM

Key Information:

Vendor
D-Link
Status
Dir-615 Firmware
Vendor
CVE Published:
24 September 2021

Summary

An information disclosure issue exists in the D-Link DIR-615 B2 2.01mt router. By exploiting a vulnerability in the /getcfg.php endpoint, attackers can forge POST requests to retrieve sensitive user credentials such as usernames and passwords, potentially compromising user accounts and network security.

References

https://www.dlink.com/en/security-bulletin/
x_refsource_MISC
https://github.com/Ilovewomen/D-LINK-DIR-615
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.