← Back

CVE-2019-7642

nvd nist
Published: Mar 25, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).

Affected (5)

Dlink
5 products
Dir 817lw Firmware
Dir 816l Firmware
Dir 816 Firmware
Dir 850l Firmware
Dir 868l Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 817lw Firmware
Version 1.04
Running on/withPlatform Versions
Dlink
Dir 817lw
Version a1
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 816l Firmware
Version 2.06
Running on/withPlatform Versions
Dlink
Dir 816l
Version b1
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 816 Firmware
Version 2.06
Running on/withPlatform Versions
Dlink
Dir 816
Version b1
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 850l Firmware
Version 1.09
Running on/withPlatform Versions
Dlink
Dir 850l
Version a1
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dir 868l Firmware
Version 1.10
Running on/withPlatform Versions
Dlink
Dir 868l
Version a1

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.