An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN information of the device.
References
| Link | Resource |
|---|---|
| https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/information%20disclosure.md | Exploit Third Party Advisory |
| https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/information%20disclosure.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 04:51
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/information%20disclosure.md - Exploit, Third Party Advisory |
08 Nov 2023, 22:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:dlink:dir-825_rev.b_firmware:2.10:*:*:*:*:*:*:* | |
| First Time |
Dlink dir-825 Rev.b Firmware
|
Information
Published : 2019-02-25 05:29
Updated : 2024-11-21 04:51
NVD link : CVE-2019-9126
Mitre link : CVE-2019-9126
CVE.ORG link : CVE-2019-9126
JSON object : View
Products Affected
dlink
- dir-825_rev.b_firmware
- dir-825_rev.b
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor