CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-14423

htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.3%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2017-14423

Dlink » Dir-850l » Version: N/A

cpe:2.3:h:dlink:dir-850l:-
Dlink » Dir-850l Firmware » Version: N/A

cpe:2.3:o:dlink:dir-850l_firmware:-
Dlink » Dir-850l Firmware » Version: 1.02

cpe:2.3:o:dlink:dir-850l_firmware:1.02
Dlink » Dir-850l Firmware » Version: 1.08b03

cpe:2.3:o:dlink:dir-850l_firmware:1.08b03
Dlink » Dir-850l Firmware » Version: 1.08trb03

cpe:2.3:o:dlink:dir-850l_firmware:1.08trb03
Dlink » Dir-850l Firmware » Version: 1.09

cpe:2.3:o:dlink:dir-850l_firmware:1.09
Dlink » Dir-850l Firmware » Version: 1.14b07

cpe:2.3:o:dlink:dir-850l_firmware:1.14b07
Dlink » Dir-850l Firmware » Version: 1.21b07

cpe:2.3:o:dlink:dir-850l_firmware:1.21b07
Dlink » Dir-850l Firmware » Version: 2.06

cpe:2.3:o:dlink:dir-850l_firmware:2.06
Dlink » Dir-850l Firmware » Version: 2.07.b05

cpe:2.3:o:dlink:dir-850l_firmware:2.07.b05
Dlink » Dir-850l Firmware » Version: 2.21b01

cpe:2.3:o:dlink:dir-850l_firmware:2.21b01
Dlink » Dir-850l Firmware » Version: 2.22b02

cpe:2.3:o:dlink:dir-850l_firmware:2.22b02
Dlink » Dir-850l Firmware » Version: fw114wwb07_h2ab

cpe:2.3:o:dlink:dir-850l_firmware:fw114wwb07_h2ab

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-14423

Products

Pricing

Contact Us