漏洞描述 【漏洞对象】D-Link DIR-850L无线AC1200双频千兆云端路由器 【涉及版本】硬件版本:A1,B1;固件版本:1.02-2.06 【漏洞描述】路由器上的身份验证绕过漏洞可允许攻击者通过直接访问已验证的页面(如/category_view.php或/folder_view.php)绕过SharePortWeb访问门户。这可能会允许未经授权远程访问存储在SharePort中的媒体,并可能在门户网站中执行写入操作。
相关漏洞推荐 CVE-2019-16920: D-Link Unauthenticated remote code POC 2025-09-01 | D-Link Fofa app="D_Link-Router" CVE-2021-27250: D-LINK DAP-2020 webproc 任意文件读取漏洞 POC 2025-09-01 | D-LINK DAP-2020 近日D-Link发布公告[1]称旗下产品DAP-2020存在任意文件读取漏洞,CVE编号为CVE-2021-27250,目前已在硬件版本:A1,固件版本:1.01 上测试了PoC,由于漏洞影响核心组件... CVE-2023-5074: D-Link D-View 8 v2.0.1.28 - Authentication Bypass POC 2025-09-01 | D-Link D-View 8 Use of a static key to protect a JWT token used in user authentication can allow an for an authentic... CVE-2018-1000600: Pre-auth Fully-responded SSRF POC 2025-09-01 | Pre-auth A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier... CVE-2018-1000861: Jenkins 2.138 Remote Command Execution POC 2025-09-01 | Jenkins A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier...