CVE-2013-4772

Published: May 12, 2014Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

D-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1.02 allows remote attackers to bypass authentication via a direct request when an authorized session is active.

Affected (4)

Products: Dlink: Dir 826l Wireless N600 Cloud Router Firmware, Dir 826l Wireless N600 Cloud Router, Dir 505l Shareport Mobile Companion Firmware, Dir 505l Shareport Mobile Companion

Dlink

4 products

Dir 826l Wireless N600 Cloud Router Firmware

Dir 826l Wireless N600 Cloud Router

Dir 505l Shareport Mobile Companion Firmware

Dir 505l Shareport Mobile Companion

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Dlink Dir 826l Wireless N600 Cloud Router Firmware	Version 1.02
Dlink Dir 826l Wireless N600 Cloud Router	Version a1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Dlink Dir 505l Shareport Mobile Companion Firmware	Version 1.01
Dlink Dir 505l Shareport Mobile Companion	Version a1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

http://packetstormsecurity.com/files/122314/D-Link-DIR-505L-DIR-826L-Authentication-Bypass.html

Source: cve@mitre.org

http://packetstormsecurity.com/files/122314/D-Link-DIR-505L-DIR-826L-Authentication-Bypass.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.