ID de Prueba:	1.3.6.1.4.1.25623.1.0.103858
Categoría:	Web application abuses
Título:	Multiple D-Link DIR Series Routers 'model/__show_info.php' Local File Disclosure Vulnerability
Resumen:	Multiple D-Link DIR series routers are prone to a local file; disclosure vulnerability because the routers fails to adequately validate user-supplied input.
Descripción:	Summary: Multiple D-Link DIR series routers are prone to a local file disclosure vulnerability because the routers fails to adequately validate user-supplied input. Vulnerability Insight: The remote D-Link device fails to adequately validate user supplied input to 'REQUIRE_FILE' in '__show_info.php' Vulnerability Impact: Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on devices running the vulnerable application. This may aid in further attacks. Affected Software/OS: DIR-615 / DIR-300 / DIR-600. Other devices and models might be affected as well. Solution: Ask the Vendor for an update. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-12943 https://www.exploit-db.com/exploits/42581/ https://jithindkurup.tumblr.com/post/165218785974/d-link-dir-600-authentication-bypass-absolute https://www.youtube.com/watch?v=PeNOJORAQsQ
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.