« Volver al listado

CVE-2013-4772

Estado: ModificadaAlta (9.3)—

D-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1.02 allows remote attackers to bypass authentication via a direct request when an authorized session is active.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Dlink — Dir-505l Shareport Mobile CompanionDlink — Dir-505l Shareport Mobile Companion FirmwareDlink — Dir-826l Wireless N600 Cloud RouterDlink — Dir-826l Wireless N600 Cloud Router Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4772",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-12T14:55:05.447",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/122314/D-Link-DIR-505L-DIR-826L-Authentication-Bypass.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/122314/D-Link-DIR-505L-DIR-826L-Authentication-Bypass.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "D-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1.02 allows remote attackers to bypass authentication via a direct request when an authorized session is active."
    },
    {
      "lang": "es",
      "value": "D-Link DIR-505L SharePort Mobile Companion 1.01 y DIR-826L Wireless N600 Cloud Router 1.02 permite a atacantes remotos evadir autenticación a través de una solicitud directa cuando una sesión autorizada está activa."
    }
  ],
  "lastModified": "2026-06-16T23:57:52.270",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dir-826l_wireless_n600_cloud_router_firmware:1.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3721D43-930B-444E-8CE1-8413F17A7808"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dir-826l_wireless_n600_cloud_router:a1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9420D90-0AB8-477B-88A1-C5646A355F9B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dir-505l_shareport_mobile_companion_firmware:1.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CC9A328-0365-4367-A0E8-19B74E9ADE3C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dir-505l_shareport_mobile_companion:a1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A44598F2-0914-41C7-BA35-BF198F2F4869"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}