D-link Dns-325 漏洞

时间轴

版本

202404032

修正

Official Fix2
Temporary Fix0
Workaround2
Unavailable0
Not Defined0

易受攻击性

High2
Functional0
Proof-of-Concept1
Unproven0
Not Defined1

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network4

身份验证

Not Defined0
High0
Low1
None3

用户交互

Not Defined0
Required1
None3

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤50
≤60
≤70
≤81
≤91
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤50
≤60
≤70
≤81
≤91
≤101

VulDB

≤10
≤20
≤30
≤41
≤50
≤60
≤70
≤82
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k0
<5k0
<10k0
<25k4
<50k0
<100k0
≥100k0

本日攻击

<1k4
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (1): 20240403

Link to Product Website: https://www.dlink.com/

已发布BaseTemp漏洞0day今天易修正CTICVE
2024-04-037.37.1D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi 权限升级$5k-$25k$0-$5kHighWorkaround0.65CVE-2024-3273
2024-04-039.89.6D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi 弱身份验证$5k-$25k$0-$5kHighWorkaround0.75CVE-2024-3272
2017-08-258.58.4D-Link DNS-345 Cookie 弱身份验证$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2014-7857
2016-08-023.53.2D-Link DNS-320/DNS-320L/DNS-325/DNS-327L/DNS-340L/DNS-345 SMB Login 跨网站脚本$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00

更多条目由 D-link

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!