CVE-2019-15656: D-Link DSL-2875al Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of username_v and password_v variables.

Affected products

• D-Link DSL-2875al Firmware: up to and including 1.00.05
• D-Link DSL-2877al Firmware: up to and including 1.00.05

Published 2020-03-19. Last modified 2026-06-17.