CVE-2020-8864

high · 8.8

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of proper handling of empty passwords. An attacker can leverage this vulnerability to execute arbitrary code on the router. Was ZDI-CAN-9471.

8.8

CVSS

80.2%

EPSS (exploit prob.)

100th

EPSS percentile

2020-03-23

Published

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-697

Affected products

Vendor	Product	Affected versions
dlink	dir-878_firmware	<= 1.20b03
dlink	dir-878	all versions
dlink	dir-882_firmware	<= 1.10b04
dlink	dir-882	all versions
dlink	dir-867_firmware	<= 1.10b04
dlink	dir-867	all versions

Check a specific version with /api/v1/cve/match.

References

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10157
https://www.zerodayinitiative.com/advisories/ZDI-20-268/
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10157
https://www.zerodayinitiative.com/advisories/ZDI-20-268/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-8864