cnvd - cnvd-2018-12491

CNVD-2018-12491

Vulnerability from cnvd - Published: 2018-07-04

Title

D-Link DIR-890L A2访问控制不当漏洞

Description

D-Link DIR-890L是友讯（D-Link）公司的无线路由器产品。 D-Link DIR-890L A2存在访问控制不当漏洞，该漏洞由于/docs/captcha_(number).jpeg URI的可预测性，攻击者可以披露接入点使用的CAPTCHA并且可以选择加载他们选择的CAPTCHA，导致未经授权的登录尝试访问点。

Severity

中

Formal description

目前没有详细解决方案提供： http://www.dlink.com/

Reference

http://seclists.org/fulldisclosure/2018/Jul/13

Impacted products

Name
D-Link DIR-890L A2

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-12103"
    }
  },
  "description": "D-Link DIR-890L\u662f\u53cb\u8baf\uff08D-Link\uff09\u516c\u53f8\u7684\u65e0\u7ebf\u8def\u7531\u5668\u4ea7\u54c1\u3002\r\n\r\nD-Link DIR-890L A2\u5b58\u5728\u8bbf\u95ee\u63a7\u5236\u4e0d\u5f53\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u7531\u4e8e/docs/captcha_(number).jpeg URI\u7684\u53ef\u9884\u6d4b\u6027\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u62ab\u9732\u63a5\u5165\u70b9\u4f7f\u7528\u7684CAPTCHA\u5e76\u4e14\u53ef\u4ee5\u9009\u62e9\u52a0\u8f7d\u4ed6\u4eec\u9009\u62e9\u7684CAPTCHA\uff0c\u5bfc\u81f4\u672a\u7ecf\u6388\u6743\u7684\u767b\u5f55\u5c1d\u8bd5\u8bbf\u95ee\u70b9\u3002",
  "discovererName": "Kevin Randall",
  "formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttp://www.dlink.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-12491",
  "openTime": "2018-07-04",
  "products": {
    "product": "D-Link DIR-890L A2"
  },
  "referenceLink": "http://seclists.org/fulldisclosure/2018/Jul/13",
  "serverity": "\u4e2d",
  "submitTime": "2018-07-04",
  "title": "D-Link DIR-890L A2\u8bbf\u95ee\u63a7\u5236\u4e0d\u5f53\u6f0f\u6d1e"
}

CVE-2018-12103 (GCVE-0-2018-12103)

Vulnerability from cvelistv5 – Published: 2018-07-05 20:00 – Updated: 2024-08-05 08:24

Summary

An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices (all hardware revisions). Due to the predictability of the /docs/captcha_(number).jpeg URI, being local to the network, but unauthenticated to the administrator's panel, an attacker can disclose the CAPTCHAs used by the access point and can elect to load the CAPTCHA of their choosing, leading to unauthorized login attempts to the access point.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	https://securityadvisories.dlink.com/announcement…	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2018/Jul/13	mailing-listx_refsource_FULLDISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:24:03.699Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10099"
          },
          {
            "name": "20180702 CVE-2018-12103",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2018/Jul/13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-06-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices (all hardware revisions). Due to the predictability of the /docs/captcha_(number).jpeg URI, being local to the network, but unauthenticated to the administrator\u0027s panel, an attacker can disclose the CAPTCHAs used by the access point and can elect to load the CAPTCHA of their choosing, leading to unauthorized login attempts to the access point."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-03-12T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10099"
        },
        {
          "name": "20180702 CVE-2018-12103",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2018/Jul/13"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-12103",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices (all hardware revisions). Due to the predictability of the /docs/captcha_(number).jpeg URI, being local to the network, but unauthenticated to the administrator\u0027s panel, an attacker can disclose the CAPTCHAs used by the access point and can elect to load the CAPTCHA of their choosing, leading to unauthorized login attempts to the access point."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10099",
              "refsource": "CONFIRM",
              "url": "https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10099"
            },
            {
              "name": "20180702 CVE-2018-12103",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2018/Jul/13"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-12103",
    "datePublished": "2018-07-05T20:00:00",
    "dateReserved": "2018-06-11T00:00:00",
    "dateUpdated": "2024-08-05T08:24:03.699Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-12491

CVE-2018-12103 (GCVE-0-2018-12103)

Tags

Sightings

Nomenclature