CVE-2019-17505

D-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as demonstrated by uplink_info.xml

published October 11, 2019

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

D-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as demonstrated by uplink_info.xml. An attacker can remotely obtain a user's Wi-Fi SSID and password, which could be used to connect to Wi-Fi or perform a dictionary attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01685 · 76.8th percentile
Published
2019-10-11T19:28Z
EPSS history
Timeline
  • 11 OCT 19:28Z
    D-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as demonstrated by uplink_info.xml
    cvelistv5