CVE-2013-4855

D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2019-10-25

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Dir-865l Firmware (Dlink)

References

• https://www.ise.io/casestudies/exploiting-soho-routers/
• https://www.ise.io/soho_service_hacks/
• https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf