CVE-2019-7388

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03

published February 5, 2019

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to get sensitive information (such as MAC address) about all clients in the WLAN via the GetClientInfo HNAP API. Consequently, an attacker can achieve information disclosure without authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02829 · 86.5th percentile
Published
2019-02-05T00:00Z
EPSS history
Timeline
  • 05 FEB 00:00Z
    An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03
    cvelistv5