Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm, (2) Device Status, or (3) Device Information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
D-Link DI-804管理接口泄露设备信息漏洞
Vulnerability Description
DI-804是一款D-LINK公司开发和设计的硬件网关和防火墙。 DI-804的Web管理接口在访问控制的实现上存在漏洞，其设备信息和设备状态页可以不用登陆就能访问。 其中设备信息页列出了设备名称、固件版本、局域网和广域网接口的MAC地址。设备状态也列出了连接信息，比如广域网IP地址、掩码、域名服务器、局域网的DHCP记录和IP地址映射的MAC地址等信息。
CVSS Information
N/A
Vulnerability Type
N/A