Auth bypass in Dlink Dap-1360 Revision F
CVE-2019-18666
An issue was discovered on D-Link DAP-1360 revision F devices. Remote attackers can start a telnet service without authorization via an undocumented HTTP request. Although this is the primary vulnerability, the impact depends on the firmware version. Versions 609EU through 613EUbeta were tested. Versions through 6.12b01 have weak root credentials, allowing an attacker to gain remote root access. After 6.12b01, the root credentials were changed but the telnet service can still be started without authorization.
Vulnerability class: Broken Authentication
EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Dlink Dap-1360_revision_f
- Dlink Dap-1360_revision_f_firmware
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-18666?
- CVE-2019-18666 is a critical-severity vulnerability in Dlink Dap-1360 Revision F, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2020-05-15.
- How severe is CVE-2019-18666?
- Critical severity. CVSS v3 base score is 9.8 out of 10.
- Is CVE-2019-18666 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.