NVD Vulnerability Detail

CVE-2019-19742

Summary	On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.
Publication Date	Dec. 18, 2019, 10:15 p.m.
Registration Date	Jan. 26, 2021, 11:41 a.m.
Last Update	Nov. 21, 2024, 1:35 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://infosecsanyam.blogspot.com/2019/12/d-link-dir-615-wireless-router.html	Exploit Third Party Advisory
2	https://infosecsanyam.blogspot.com/2019/12/d-link-dir-615-wireless-router.html	Exploit Third Party Advisory
3	https://medium.com/%40infosecsanyam/d-link-dir-615-wireless-router-persistent-cross-site-scripting-6ee00f5c694d
4	https://medium.com/%40infosecsanyam/d-link-dir-615-wireless-router-persistent-cross-site-scripting-6ee00f5c694d
5	https://pastebin.com/edit/MZV6DNg7	Broken Link
6	https://pastebin.com/edit/MZV6DNg7	Broken Link
7	https://www.dlink.com/en/security-bulletin	Vendor Advisory
8	https://www.dlink.com/en/security-bulletin	Vendor Advisory
9	https://www.exploit-db.com/exploits/47776	Exploit Third Party Advisory VDB Entry
10	https://www.exploit-db.com/exploits/47776	Exploit Third Party Advisory VDB Entry
11	https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf	Exploit Third Party Advisory US Government Resource
12	https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf	Exploit Third Party Advisory US Government Resource

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-79	クロスサイト・スクリプティング（XSS）	https://cwe.mitre.org/data/definitions/79.html

JVN Vulnerability Information

D-Link DIR-615 デバイスにおけるクロスサイトスクリプティングの脆弱性

Title	D-Link DIR-615 デバイスにおけるクロスサイトスクリプティングの脆弱性
Summary	D-Link DIR-615 デバイスには、クロスサイトスクリプティングの脆弱性が存在します。
Possible impacts	情報を取得される、および情報を改ざんされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Dec. 13, 2019, midnight
Registration Date	Dec. 27, 2019, 3:38 p.m.
Last Update	Dec. 27, 2019, 3:38 p.m.

Affected System

D-Link Systems, Inc.

DIR-615 ファームウェア

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-19742	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19742
National Vulnerability Database (NVD)
2	CVE-2019-19742	https://nvd.nist.gov/vuln/detail/CVE-2019-19742

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-79	https://jvndb.jvn.jp/ja/cwe/CWE-79.html

ベンダー情報

No	Name	URL
D-Link
1	Security Bulletin	https://www.dlink.com/en/security-bulletin

その他

No	Name	URL
関連文書
1	D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting	https://medium.com/@infosecsanyam/d-link-dir-615-wireless-router-persistent-cross-site-scripting-6ee00f5c694d

Change Log

No	Changed Details	Date of change
1	[2019年12月27日] 掲載	Dec. 27, 2019, 3:38 p.m.