CVE-2018-20675

CWE-287 — Improper Authentication3 documents3 sources

Severity

9.8CRITICAL

EPSS

0.4%

top 37.98%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dlink Dir-822-us Firmware Dlink Dir-822 Firmware Dlink Dir-850l Firmware +1 more

Timeline

PublishedJan 9

Latest updateMay 13

Description

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authentication bypass.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶NVDdlink/dir-850l_firmware1.21b07+2

▶NVDdlink/dir-880l_firmware1.07.b08+1

▶NVDdlink/dir-822_firmware3.10b06

▶NVDdlink/dir-822-us_firmware3.10b06

🔴Vulnerability Details

GHSA

GHSA-w25v-hrr2-2v78: D-Link DIR-822 C1 before v3↗2022-05-13

▶

CVEList

CVE-2018-20675: D-Link DIR-822 C1 before v3↗2019-01-09

▶