Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
dlink dsl-2888a firmware vulnerabilities and exploits
(subscribe to this query)
5.8
CVSSv2
CVE-2020-24579
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality.
Dlink Dsl2888a Firmware
5.4
CVSSv2
CVE-2020-24580
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. Lack of authentication functionality allows an malicious user to assign a static IP address that was once used by a valid user.
Dlink Dsl2888a Firmware
7.7
CVSSv2
CVE-2020-24581
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not reachable via the web user interface) that lets an authenticated user execute Operating System commands.
Dlink Dsl2888a Firmware
3.3
CVSSv2
CVE-2020-24578
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and download sensitive files (such as the password hash file).
Dlink Dsl2888a Firmware
5
CVSSv2
CVE-2020-24577
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive information, such as the hashed admin login password and the Internet provider connection username and cleartext password, in the application'...
Dlink Dsl-2888a Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120
CVE-2024-35921
CVE-2024-35874
brute force
CVE-2024-36080
unprivileged
CVE-2024-35917
IDOR
CVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started