CVE-2014-10026

Published: Jan 13, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.

Affected (1)

Products: Dlink: Dap 1360 Firmware

Dlink

1 product

Dap 1360 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlink Dap 1360 Firmware	Up to 2.5.4

Running on/with	Platform Versions
Dlink Dap 1360	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://seclists.org/fulldisclosure/2014/Nov/19

Source: cve@mitre.org

Exploit

http://websecurity.com.ua/7179/

Source: cve@mitre.org

Exploit

http://seclists.org/fulldisclosure/2014/Nov/19

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://websecurity.com.ua/7179/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.