Vulnerability Description
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN information of the device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-825 Rev.B Firmware | 2.10 |
| Dlink | Dir-825 Rev.B | - |
Related Weaknesses (CWE)
References
- https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/informatExploitThird Party Advisory
- https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/informatExploitThird Party Advisory
FAQ
What is CVE-2019-9126?
CVE-2019-9126 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml document. This will reveal the PIN code, MAC address...
How severe is CVE-2019-9126?
CVE-2019-9126 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-9126?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-825 Rev.B Firmware, Dlink Dir-825 Rev.B.