High severity · published May 3, 2024
CVE-2023-44420
D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability
8.8
CVSS
1%
EPSS
No
On KEV
Description
D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the prog.cgi executable. The issue results from an incorrect implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the device. Was ZDI-CAN-21100.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
DIR-X3260 · D-Link
1.02B02 · source: vendor, CISA
DF
Dir-x3260 Firmware · Dlink
before 1.04b01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-44420
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-44420
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-1518/
More from DIR-X3260
8.8
CVE-2023-44419
D-Link DIR-X3260 Prog.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-44418
D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-35723
D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remote Code Execution Vulnerability
8.0
CVE-2023-51613
D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability
8.0
CVE-2023-44427
D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability