CVE-2019-15656

PoC —

CVSS 3.1

7.5 high

EPSS

1%p70

Published

Mar 19, 2020 (Mar 19, 2020)

Modified

Jun 17, 2026

Description

D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of username_v and password_v variables.

Vendors: dlink
Products: dsl-2875al firmware, dsl-2877al firmware
Weakness: CWE-200, CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.