CVE-2018-12103 Security feature bypass in n/a
Attackers can bypass CAPTCHA protection on D-Link routers by predicting image URIs, enabling unauthorized login attempts to the administrator panel.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-12103?
CVE-2018-12103 is a medium-severity vulnerability in n/a, published on 5 Jul 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices (all hardware revisions). Due to the predictability of the /docs/captcha_(number).jpeg URI, being local to the network, but unauthenticated to the administrator's panel, an attacker can disclose the CAPTCHAs used by the access point and can elect to load the CAPTCHA of their choosing, leading to unauthorized login attempts to the access point.
Weakness: CWE-863
Which versions are affected by CVE-2018-12103?
It affects 3 products.
Products include D-Link Dir-885l\/R Firmware, D-Link Dir-895l\/R Firmware, Dlink Dir-890l Firmware.
How do I fix CVE-2018-12103?
No fix has been published for CVE-2018-12103 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-12103 being exploited?
There is no known exploitation of CVE-2018-12103 in the wild and no public exploit code.
Sources
Also known as GHSA-hmvr-fwh8-p62r.