CVE-2018-20675

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A*…

published January 9, 2019

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

⚠️ An authentication bypass vulnerability lurks in certain D-Link routers, allowing sneaky access to their configuration without a password! Think of it like an unlocked front door at a party—anyone can waltz right in and change the music or turn off the lights without an invitation! 🎉 If exploited, an attacker could gain access to sensitive router settings, potentially changing configurations to redirect traffic, intercept communications, or even create backdoors for further intrusions. Yikes!

Put simply

Think of it like an unlocked front door at a party—anyone can waltz right in and change the music or turn off the lights without an invitation! 🎉 This vulnerability allows unauthorized access to the router’s configuration page by bypassing authentication checks, meaning attackers don't need valid login credentials.

What to do

If exploited, an attacker could gain access to sensitive router settings, potentially changing configurations to redirect traffic, intercept communications, or even create backdoors for further intrusions. Yikes! Update your D-Link router firmware to at least version 3.11B01Beta for DIR-822, 1.21B08Beta for DIR-850L A*, 2.22B03Beta for DIR-850L B*, or 1.20B02Beta for DIR-880L A*. Regularly check for firmware updates to ensure continued protection. You've got this! By updating your firmware, you’re taking powerful steps to secure your network. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01835 · 78.8th percentile
Published
2019-01-09T00:00Z
EPSS history
Timeline
  • 09 JAN 00:00Z
    D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A*…
    cvelistv5