Strix
26.1K

CVE-2018-20674

UnknownEPSS 2.53%

Last modified

CVE-2018-20674 is a vulnerability of currently unknown severity. D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.. EPSS estimates a 2.53% chance of exploitation in the next 30 days.

Description

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.

Metrics

EPSS Probability
2.53%

82.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
DlinkDir-822 Firmware<= 3.10b06—
DlinkDir-822-Us Firmware<= 3.10b06—
DlinkDir-850l Firmware<= 1.21b07—
DlinkDir-850l Firmware<= 2.21b01—
DlinkDir-850l Firmware2.22b02Beta
DlinkDir-880l Firmware<= 1.07.b08—
DlinkDir-880l Firmware1.20b01Beta

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2018-20674?
D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.
How severe is CVE-2018-20674?
Severity scoring for CVE-2018-20674 is pending analysis. The EPSS model estimates a 2.53% probability of exploitation in the next 30 days.
How do I fix CVE-2018-20674?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-20674?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST