Auth bypass in Dlink Dir-816
CVE-2019-7642
D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.026 (84.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 85th percentile — 84.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.026 · newest: 0.026 · change: 0.000
Affected products
- Dlink Dir-816 — versions b1
- Dlink Dir-816 Firmware — versions 2.06
- Dlink Dir-816l — versions b1
- Dlink Dir-816l Firmware — versions 2.06
- Dlink Dir-817lw — versions a1
- Dlink Dir-817lw Firmware — versions 1.04
- Dlink Dir-850l — versions a1
- Dlink Dir-850l Firmware — versions 1.09
- Dlink Dir-868l — versions a1
- Dlink Dir-868l Firmware — versions 1.10
Weakness classification (CWE)
Public proof-of-concept exploits
References
- github.com/xw77cve/CVE-2019-7642/blob/master/README.md (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2019-7642?
- CVE-2019-7642 is a high-severity vulnerability in Dlink Dir-816, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2019-03-25.
- How severe is CVE-2019-7642?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2019-7642 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.