High severity · published Jul 23, 2020
CVE-2020-15632
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers
8.8
CVSS
3.5%
EPSS
No
On KEV
Description
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HNAP GetCAPTCHAsetting requests. The issue results from the lack of proper handling of sessions. An attacker can leverage this vulnerability to execute arbitrary code in the context of the device. Was ZDI-CAN-10083.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dir-842 Firmware · Dlink
through 3.13b09 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-15632
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-15632
Patch
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10184
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-880/
More from Dir-842 Firmware
9.8
CVE-2023-39666
D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters
9.8
CVE-2020-8962
A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the…
5.3
CVE-2024-0717
D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure