Vulnerability Database

299,030

Total vulnerabilities in the database

CVE-2023-36091

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

  • Published: Jul 31, 2023
  • Updated: Nov 8, 2023
  • CVE: CVE-2023-36091
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
dlink / dir-895l_firmware 1.02-b07 1.02-b07.x