high7.5
CVE-2018-18907
An issue was discovered on D-Link DIR-850L 1.21WW devices.
Impact
An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-850l Firmare | before 1.21b07 |
Weakness classification
References
- NVD record
- CVE.org record
- http://us.dlink.com/security-advisories/
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10097
- https://www.synopsys.com/blogs/software-security/wpa2-encryption-bypass-defensics-fuzzing/
- http://us.dlink.com/security-advisories/
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10097
- https://www.synopsys.com/blogs/software-security/wpa2-encryption-bypass-defensics-fuzzing/