VDB

GCVE-110-CERTCC-2013-248083

GCVE-110-CERTCC-2013-248083
Advisory PublishedCVSS 8.3/10
Vulnetix · Advisory published October 12, 2013
Various D-Link routers allow administrative web actions if the HTTP request contains a specific User-Agent string. This backdoor allows an attacker to bypass password authentication and access the router's administrative web interface. Planex and Alpha Networks devices may also be affected.
Download JSON Open in Console

Risk Scores

CVSS 2.0
8.3/10
High · AV:A/AC:L/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact4d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7.5remediation_levelWreport_confidenceCenvironmental_score5.6382412193856target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2013-6026CVE-2013-6027

Transitive aliases

VAR-201310-0388GHSA-v2pf-28pq-8p67GSD-2013-6027GHSA-cjpj-cp59-mc73GSD-2013-6026VAR-201310-0389

References

D-Link routers authenticate administrative access using specific User-Agent string
url
D-Link routers authenticate administrative access using specific User-Agent string
url
D-Link routers authenticate administrative access using specific User-Agent string
url
D-Link routers authenticate administrative access using specific User-Agent string
url
D-Link routers authenticate administrative access using specific User-Agent string
url
D-Link routers authenticate administrative access using specific User-Agent string
advisory

Browse GCVE Records

73,044 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›