CVE-2019-7642
HIGH 7.5EPSS 2.6%
D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 2.60% chance of exploitation in the next 30 days, 85th percentile
- Published
- 2019-03-25
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
- xw77cve/CVE-2019-764216★ · 2019-03-04