Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved configuration, via a direct request to firmwarecfg.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
D-Link DSL路由器可绕过访问认证漏洞
Vulnerability Description
D-Link DSL路由器是家庭和小型办公室常用的路由器。 D-Link DSL路由器对用户访问的认证存在问题，远程攻击者可能利用此漏洞非授权访问设备。 在执行CGI /cgi-bin/firmwarecfg时，脚本会检查在/var/tmp/中是否存在fw_ip文件。如果存在这个文件的话，就会允许其中列出的所有IP地址无需认证直接访问设备。如果不存在这个文件的话，CGI就会创建一个新文件，在其中写入请求地址。
CVSS Information
N/A
Vulnerability Type
N/A