CVE-2018-14080

An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to download the configuration file.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-10-09

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Dir-809 A1 Firmware (D-link)
• Dir-809 A2 Firmware (D-link)
• Dir-809 Guestzone Firmware (D-link)

References

• https://blog.nivel4.com/investigaciones/nuevas-vulnerabilidades-en-router-d-link-permiten-tomar-control-remoto-del-disp…