CVE-2023-36090
published 2023-07-31CVE-2023-36090: Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only…
PriorityP357critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.10%
61.9th percentile
Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dlink | dir-885l_firmware | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_oracle7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9gm9-9rq7-5mcj: ** UNSUPPORTED WHEN ASSIGNED ** Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges v
ghsa_unreviewed·2023-07-31
CVE-2023-36090 [CRITICAL] CWE-863 GHSA-9gm9-9rq7-5mcj: ** UNSUPPORTED WHEN ASSIGNED ** Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges v
** UNSUPPORTED WHEN ASSIGNED ** Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: General (Apache Commons Compress) — CVE-2021-36090
vendor_oracle·2023-07-15·CVSS 7.5
CVE-2021-36090 [HIGH] Oracle Oracle Fusion Middleware Risk Matrix: General (Apache Commons Compress) — CVE-2021-36090
Oracle Oracle Fusion Middleware Risk Matrix: General (Apache Commons Compress) vulnerability
CVE: CVE-2021-36090
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujul2023 (JUL 2023)
Oracle
Oracle Oracle Blockchain Platform Risk Matrix: BCS Console (Apache Commons Compress) — CVE-2021-36090
vendor_oracle·2023-04-15·CVSS 4.9
CVE-2021-36090 [HIGH] Oracle Oracle Blockchain Platform Risk Matrix: BCS Console (Apache Commons Compress) — CVE-2021-36090
Oracle Oracle Blockchain Platform Risk Matrix: BCS Console (Apache Commons Compress) vulnerability
CVE: CVE-2021-36090
CVSS: 4.9
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpuapr2023 (APR 2023)
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: Third Party Patch (Apache Commons Compress) — CVE-2021-36090
vendor_oracle·2023-01-15·CVSS 7.5
CVE-2021-36090 [HIGH] Oracle Oracle Fusion Middleware Risk Matrix: Third Party Patch (Apache Commons Compress) — CVE-2021-36090
Oracle Oracle Fusion Middleware Risk Matrix: Third Party Patch (Apache Commons Compress) vulnerability
CVE: CVE-2021-36090
CVSS: 7.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2023 (JAN 2023)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-07-31
Published