Dlink Dir-615 T1 Firmware vulnerabilities

2 known vulnerabilities affecting dlink/dir-615_t1_firmware.

Total CVEs

2

CISA KEV

0

Public exploits

2

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-42627CRITICALCVSS 9.8PoCv20.062022-08-23

CVE-2021-42627 [CRITICAL] CVE-2021-42627: The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed d The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page.

CVE-2019-19743MEDIUMCVSS 6.5PoCv20.072019-12-16

CVE-2019-19743 [MEDIUM] CVE-2019-19743: On D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link portal On D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link portal.