CVE-2017-3191

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages such as tools_admin.asp without credentials.

La versión de firmware 1.23 de DIR-130 y la versión de firmware 1.12 de DIR-330 de D-Link son vulnerables a la omisión de autenticación de la página de inicio de sesión remoto. Un atacante remoto que pueda acceder a la página de inicio de sesión del área de administración remota puede manipular la petición POST de tal manera que pueda acceder a determinadas páginas permitidas solo para los administradores como tools_admin.asp sin credenciales.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2016-12-05 CVE Reserved
2017-12-15 CVE Published
2023-11-25 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation
CWE-294: Authentication Bypass by Capture-replay

CAPEC

References (4)

URL	Tag	Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/123293	Vdb Entry
https://www.kb.cert.org/vuls/id/553503	Issue Tracking
https://www.scmagazine.com/d-link-dir-130-and-dir-330-routers-vulnerable/article/644553	Media Coverage
https://www.wilderssecurity.com/threads/d-link-dir-130-and-dir-330-are-vulnerable-to-authentication-bypass-and-do-not-protect-credentials.392703	Issue Tracking

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
D-link Search vendor "D-link"	Dir-130 Firmware Search vendor "D-link" for product "Dir-130 Firmware"	1.23 Search vendor "D-link" for product "Dir-130 Firmware" and version "1.23"	-	Affected	in	Dlink Search vendor "Dlink"	Dir-130 Search vendor "Dlink" for product "Dir-130"	-	-	Safe
D-link Search vendor "D-link"	Dir-330 Firmware Search vendor "D-link" for product "Dir-330 Firmware"	1.12 Search vendor "D-link" for product "Dir-330 Firmware" and version "1.12"	-	Affected	in	Dlink Search vendor "Dlink"	Dir-330 Search vendor "Dlink" for product "Dir-330"	-	-	Safe