CVE-2017-3192CWE-522

CVE-2017-3192: vulnerability in D-Link DIR-130

Published · Updated

Follow this CVE+ Monitor DIR-130+ Monitor DIR-330

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 39%
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The tools_admin.asp page discloses the administrator password in base64 encoding in the returned web page. A remote attacker with access to this page (potentially through a authentication bypass such as CVE-2017-3191) may obtain administrator credentials for the device.
Affected products
D-Link · DIR-130D-Link · DIR-330
Related CVEs — D-Link DIR-130

In the same product, most dangerous first.

CVE-2017-3191—CVE-2017-3191EPSS 62.5%