CVE-2022-44801

D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control

Critical 路 published November 22, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

馃毃 There's a critical access control flaw in the D-Link DIR-878 that could let attackers stroll right in and take control! 馃敟 Think of your router as a VIP lounge. If the bouncer (access control) doesn't check IDs properly, anyone could walk in and cause chaos, just like this vulnerability allows unauthorized users to gain access to sensitive areas of your network! An attacker could exploit this to gain full control over your router, potentially leading to unauthorized access to personal data, changes to network settings, or even using your internet connection for malicious activities. In short, they can do anything they want, and that's absolutely devastating!

Put simply

Think of your router as a VIP lounge. If the bouncer (access control) doesn't check IDs properly, anyone could walk in and cause chaos, just like this vulnerability allows unauthorized users to gain access to sensitive areas of your network! This vulnerability arises from improper access controls in the D-Link DIR-878 version 1.02B05, where certain sensitive functionalities can be accessed without proper authentication, allowing malicious users to exploit these weaknesses.

What to do

An attacker could exploit this to gain full control over your router, potentially leading to unauthorized access to personal data, changes to network settings, or even using your internet connection for malicious activities. In short, they can do anything they want, and that's absolutely devastating! Update your D-Link DIR-878 to the latest firmware version as soon as possible to eliminate this vulnerability. Additionally, audit your router settings and enable any additional security measures available. Don't wait鈥攕ecure your network today! You've got this! Follow these steps, and you'll be a security hero in no time! 馃Ω

The record
Technical detail
CVSS v3.1
9.8 路 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01191 路 67.7th percentile
Published
2022-11-22T00:00Z
EPSS history
Timeline
  • 22 NOV 00:00Z
    D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control
    cvelistv5