high8.8
CVE-2017-9100
login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password …
Impact
login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-600m Firmware | Version 3.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://touhidshaikh.com/blog/poc/d-link-dir600-auth-bypass/
- https://www.exploit-db.com/exploits/42039/
- https://www.youtube.com/watch?v=waIJKWCpyNQ
- http://touhidshaikh.com/blog/poc/d-link-dir600-auth-bypass/
- https://www.exploit-db.com/exploits/42039/
- https://www.youtube.com/watch?v=waIJKWCpyNQ