CVE-2017-14423
High
Description
htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests.
SeverityHigh
CVSS7.5
Exploit probability—
ProductDlink Dir-850l Firmware
PublishedSep 13, 2017
First seenSep 13, 2017
How to fix
Update
- dlink dir-850l_firmwarefw114wwb07_h2ab or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dir-850l_firmware | v < fw114wwb07_h2ab, fw114wwb07_h2ab | fw114wwb07_h2ab |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.