CVE-2017-3191CWE-294

CVE-2017-3191: vulnerability in D-Link DIR-130

Published · Updated

Follow this CVE+ Monitor DIR-130+ Monitor DIR-330

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 63%
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages such as tools_admin.asp without credentials.
Affected products
D-Link · DIR-130D-Link · DIR-330
Related CVEs — D-Link DIR-130

In the same product, most dangerous first.

CVE-2017-3192—CVE-2017-3192EPSS 39.5%