CVE-2017-9100
published 2017-05-21CVE-2017-9100: login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password…
high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dlink | dir-600m_firmware | — | — |
| lame_project | lame | >= 0 < 3.99.5+repack1-3ubuntu1+esm3 | 3.99.5+repack1-3ubuntu1+esm3 |
| lame_project | lame | >= 0 < 3.99.5+repack1-9ubuntu0.1~esm2 | 3.99.5+repack1-9ubuntu0.1~esm2 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv5.5MEDIUM