Description (CNA)
There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to log_clear.php, which could be used to erase attack traces.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/dahua966/Routers-vuls
- https://github.com/dahua966/Routers-vuls/blob/master/DIR-412/vuls_info.md
ADP enrichment
No English description supplied.