D-Link Dva-5592 Firmware vulnerabilities

3 CVEs affecting D-Link Dva-5592 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6969, published 2019-08-02.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-6969, published 2019-08-02. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. The web interface of the D-Link DVA-5592 20180823 is vulnerable to an authentication bypass that allows an unauthenticated user to have access to sensitive information such as the Wi-Fi password and…
• CVE-2018-17777, published 2018-12-18. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. An issue was discovered on D-Link DVA-5592 A1_WI_20180823 devices. If the PIN of the page "/ui/cbpc/login" is the default Parental Control PIN (0000), it is possible to bypass the login form by…
• CVE-2019-6968, published 2019-08-02. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. The web interface of the D-Link DVA-5592 20180823 is vulnerable to XSS because HTML form parameters are directly reflected.