CVE-2019-7390

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03

published February 5, 2019

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to hijack the DNS service configuration of all clients in the WLAN, without authentication, via the SetWanSettings HNAP API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01963 · 80.2th percentile
Published
2019-02-05T00:00Z
EPSS history
Timeline
  • 05 FEB 00:00Z
    An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03
    cvelistv5