Отправить #467906: D-Link DIR823G V1.0.2B05_20181207 Improper Access ControlsИнформация

НазваниеD-Link DIR823G V1.0.2B05_20181207 Improper Access Controls
ОписаниеAn improper access control vulnerability exists in the web management interface of DIR823G_V1.0.2B05_20181207. By sending a specially crafted unauthenticated HTTP POST request to the /HNAP1/ endpoint with the SOAPAction header set to SetFirewallSettings , an attacker can enable or disable the firewall of the device.
Источник⚠️ https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-823G/SetFirewallSettings.md
Пользователь
 wxhwxhwxh_mie (UID 66748)
Представление23.12.2024 07:14 (2 лет назад)
Модерация29.12.2024 13:21 (6 days later)
СтатусДубликат
Запись VulDB289763 [D-Link DIR-823G 1.0.2B05_20181207 Web Management Interface /HNAP1/ эскалация привилегий]
Баллы0

Do you want to use VulDB in your project?

Use the official API to access entries easily!