CVE-2013-7055

D-Link DIR-100 4.03B07 has PPTP and poe information disclosure

published February 4, 2020

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

⚠️ A misconfigured D-Link DIR-100 exposes sensitive PPTP and PoE information. That’s like leaving a box of confidential client files out in the open — anyone passing by can take a peek! 📦 Imagine a library where the staff has misplaced the key to the archives, leaving sensitive documents open for anyone to browse. In this case, the D-Link router is handing out details that should remain confidential, just like a librarian without a security protocol. An attacker could potentially gather sensitive network details, such as PPTP and PoE information, allowing them to map out your network's structure and vulnerabilities. While the exploitation is not currently known, the risk of data leakage could lead to serious security breaches!

Put simply

Imagine a library where the staff has misplaced the key to the archives, leaving sensitive documents open for anyone to browse. In this case, the D-Link router is handing out details that should remain confidential, just like a librarian without a security protocol. This vulnerability in the D-Link DIR-100 allows unauthorized access to sensitive PPTP and Power over Ethernet (PoE) configurations, which could lead to information disclosure and further attacks.

What to do

An attacker could potentially gather sensitive network details, such as PPTP and PoE information, allowing them to map out your network's structure and vulnerabilities. While the exploitation is not currently known, the risk of data leakage could lead to serious security breaches! To mitigate this vulnerability, make sure the device firmware is updated to the latest version. Additionally, review your network settings and ensure that sensitive information is not inadvertently shared. 🔧 You've got this! Take these steps to secure your network, and you'll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06985 · 94.1th percentile
Published
2020-02-04T13:56Z
EPSS history
Timeline
  • 04 FEB 13:56Z
    D-Link DIR-100 4.03B07 has PPTP and poe information disclosure
    cvelistv5