CVE-2019-7388

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to get sensitive information (such as MAC address) about all clients in the WLAN via the GetClientInfo HNAP API. Consequently, an attacker can achieve information disclosure without authentication.

• CWE-200

• http://www.securityfocus.com/bid/106852Third Party Advisory
• https://github.com/leonW7/D-Link/blob/master/Vul_3.mdExploit, Third Party Advisory
• http://www.securityfocus.com/bid/106852Third Party Advisory
• https://github.com/leonW7/D-Link/blob/master/Vul_3.mdExploit, Third Party Advisory

Published

Feb 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7366Buffer overflow vulnerability in Autodesk FBX Software Devel…7.8
• CVE-2019-7383An issue was discovered on Systrome Cumilon ISG-600C, ISG-60…7.8
• CVE-2019-7384An authenticated shell command injection issue has been disc…7.8
• CVE-2019-7385An authenticated shell command injection issue has been disc…7.8
• CVE-2019-7386A Denial of Service issue has been discovered in the Gecko c…
• CVE-2019-7387A local file inclusion vulnerability exists in the web inter…
• CVE-2019-7389An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7390An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7391ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/log…
• CVE-2019-7392An improper authentication vulnerability in CA Privileged Ac…
• CVE-2019-7393A UI redress vulnerability in the administrative user interf…4.3
• CVE-2019-7394A privilege escalation vulnerability in the administrative u…8.8