high7.5Public exploit code
CVE-2021-46378
DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DLINK DIR850 - Insecure Access Control2022-05-11 · remote · hardware
Impact
DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-850l Firmware | Version 1.08trb03 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/167042/DLINK-DIR850-Insecure-Direct-Object-Reference.html
- https://drive.google.com/file/d/1S69wOovVa8NRVUXcB0PkVvZHFxREcD4Y/view?usp=sharing
- https://www.dlink.com/en/security-bulletin/
- http://packetstormsecurity.com/files/167042/DLINK-DIR850-Insecure-Direct-Object-Reference.html
- https://drive.google.com/file/d/1S69wOovVa8NRVUXcB0PkVvZHFxREcD4Y/view?usp=sharing
- https://www.dlink.com/en/security-bulletin/