CVE-2019-7642

D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).
References
Link Resource
https://github.com/xw77cve/CVE-2019-7642/blob/master/README.md Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-817lw_firmware:1.04:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-817lw:a1:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dlink:dir-816l_firmware:2.06:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-816l:b1:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dlink:dir-816_firmware:2.06:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-816:b1:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dlink:dir-850l_firmware:1.09:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-850l:a1:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dlink:dir-868l_firmware:1.10:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-868l:a1:*:*:*:*:*:*:*

Information

Published : 2019-03-25 15:29

Updated : 2021-04-23 08:45


NVD link : CVE-2019-7642

Mitre link : CVE-2019-7642


JSON object : View

CWE
CWE-306

Missing Authentication for Critical Function

Advertisement

dedicated server usa

Products Affected

dlink

  • dir-868l
  • dir-850l_firmware
  • dir-817lw_firmware
  • dir-816
  • dir-850l
  • dir-817lw
  • dir-816l
  • dir-816l_firmware
  • dir-816_firmware
  • dir-868l_firmware