d-link DSP-W215 Security Vulnerabilities

3 Vulnerabilities

Description
UNSUPPORTED WHEN ASSIGNED Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware revisions is considered End of Life and as such this issue will not be patched. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2021-29295, Last Modified: 2021-08-10T20:15:00Z References Advisory Modemly Security Checklist D-Link-DSP-W215-router-setup
D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2020-13135, Last Modified: 2020-05-18T17:57:00Z References Advisory Modemly Security Checklist D-Link-DSP-W215-router-setup
D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2020-13136, Last Modified: 2020-05-18T17:57:00Z References Advisory Modemly Security Checklist D-Link-DSP-W215-router-setup

Description

** UNSUPPORTED WHEN ASSIGNED **Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware revisions is considered End of Life and as such this issue will not be patched.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2021-29295, Last Modified: 2021-08-10T20:15:00Z

References

Advisory

Modemly Security Checklist

D-Link-DSP-W215-router-setup

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2020-13135, Last Modified: 2020-05-18T17:57:00Z

References

Advisory

Modemly Security Checklist

D-Link-DSP-W215-router-setup

D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2020-13136, Last Modified: 2020-05-18T17:57:00Z

References

Advisory

Modemly Security Checklist

D-Link-DSP-W215-router-setup

USAGE: Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.