An issue exists in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote malicious users to get sensitive information (such as MAC address) about all clients in the WLAN via the GetClientInfo HNAP API. Consequently, an attacker can achieve information disclosure without authentication.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
dlink dir-823g_firmware 1.02b03 |