D-Link Dir-130 Firmware vulnerabilities

2 CVEs affecting D-Link Dir-130 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-3192, published 2017-12-16.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-3191, published 2017-12-16. Critical severity, CVSS 9.8. EPSS: 62.5% chance of exploitation in the next 30 days. D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login…
• CVE-2017-3192, published 2017-12-16. Critical severity, CVSS 9.8. EPSS: 39.5% chance of exploitation in the next 30 days. D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The tools_admin.asp page discloses the administrator password in base64…