CVE Feed

    Dashboard / CVE / CVE-2020-13785

    CVE-2020-13785

    D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength.

    Published:Jun 3, 2020
    Last Modified:Nov 21, 2024
    EPS:Jun 3, 2020
    EPSS Score:0.00342
    CVSS Score:7.5

    Affected Products

    Vendor
    Dlink
    Product
    Dir-865l
    Vendor
    Dlink
    Product
    Dir-865l Firmware

    Exploits

    https://unit42.paloaltonetworks.com/6-new-d-link-vulnerabilities-found-on-home-routers/https://unit42.paloaltonetworks.com/6-new-d-link-vulnerabilities-found-on-home-routers/

    Common Weakness Enumeration

    CWE-326 Inadequate Encryption Strength

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-112 Brute Force
    CAPEC-192 Protocol Analysis
    CAPEC-20 Encryption Brute Forcing

    Related CVEs

    CVE-2020-25786 (CVSS 6.1) — webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Refer…
    CVE-2020-13782 (CVSS 8.8) — D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection.…
    CVE-2020-13783 (CVSS 7.5) — D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information.…
    CVE-2020-13784 (CVSS 7.5) — D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator.…
    CVE-2020-13786 (CVSS 8.8) — D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF.…
    CVE-2020-13787 (CVSS 7.5) — D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information.…
    CVE-2019-20213 (CVSS 7.5) — D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GR…
    CVE-2019-17621 (CVSS 9.8) — The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthent…
    CVE-2013-4855 (CVSS 8.8) — D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links t…
    CVE-2013-4856 (CVSS 6.5) — D-Link DIR-865L has Information Disclosure.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High