Vulnerabilities > CVE-2017-14423 - Improper Restriction of Excessive Authentication Attempts vulnerability in Dlink Dir-850L Firmware

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
dlink
CWE-307
NVD
Published: 2017-09-13
Updated: 2023-11-08

Summary

htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests.

Vulnerable Configurations

Part Description Count
OS
Dlink
12
Hardware
Dlink
1

Common Weakness Enumeration (CWE)

References