CVE-2021-27250CWE-73

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access…

Medium · published April 14, 2021

Patch now

High probability of exploitation

CVSS calls it medium at 6.5. It sits in the 99.3th percentile for exploit probability.

CVSS v3.0
6.5
EPSS
67%
Percentile
99.3
In the wild
Unconfirmed
What it is

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When parsing the errorpage request parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-11856.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.67389 · 99.3th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2021-04-14T15:45Z
EPSS history
Timeline
  • 14 APR 15:45Z
    This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access…
    cvelistv5