Dlink Dir-615 J1 Firmware vulnerabilities

2 known vulnerabilities affecting dlink/dir-615_j1_firmware.

Total CVEs

2

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL2

Vulnerabilities

Page 1 of 1

CVE-2021-42627CRITICALCVSS 9.8PoCv20.062022-08-23

CVE-2021-42627 [CRITICAL] CVE-2021-42627: The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed d The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page.

CVE-2019-18852CRITICALCVSS 9.8v1002019-11-11

CVE-2019-18852 [CRITICAL] CWE-319 CVE-2019-18852: Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /et Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config/image_sign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 (for DCN), DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and DIR-842 C1 v3.00.