D-Link DSL-2875al Firmware vulnerabilities

2 CVEs affecting D-Link DSL-2875al Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15656, published 2020-03-19.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-15655, published 2020-03-19. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DSL-2875AL devices through 1.00.05 are prone to password disclosure via a simple crafted /romfile.cfg request to the web management server. This request doesn't require any authentication and…
• CVE-2019-15656, published 2020-03-19. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of username_v and…