high8.8Public exploit code
CVE-2019-17525
The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DIR-615 T1 20.10 - CAPTCHA Bypass2020-06-04 · webapps · hardware
Impact
The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-615 Firmware | Version 20.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/157936/D-Link-DIR-615-T1-20.10-CAPTCHA-Bypass.html
- https://github.com/huzaifahussain98/CVE-2019-17525/
- http://packetstormsecurity.com/files/157936/D-Link-DIR-615-T1-20.10-CAPTCHA-Bypass.html
- https://github.com/huzaifahussain98/CVE-2019-17525/