CVE-2014-7858

published 2017-08-25

CVE-2014-7858: The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
d-link	dnr-326_firmware	<= 1.40b03	—

CWE-287