CVE-2013-6026
19.10.2013, 10:36
The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlset_roodkcableoj28840ybtide User-Agent HTTP header, as exploited in the wild in October 2013.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dlink | di-524up | - |
| dlink | di-604\+ | - |
| dlink | di-604s | - |
| dlink | di-604up | - |
| dlink | di-624s | - |
| dlink | dir-100 | - |
| dlink | dir-120 | - |
| dlink | tm-g5240 | - |
| alphanetworks | vdsl_asl-55052 | - |
| alphanetworks | vdsl_asl-56552 | - |
| planex | brl-04cw | - |
| planex | brl-04r | - |
| planex | brl-04ur | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References