CVE-2023-36090

CriticalCVSS 9.8

Published: 31/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.10%

61th percentile - higher than 61% of all known CVEs

Summary

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. This vulnerability only affects products that are no longer supported by the maintainer.

Risk Assessment

Organizations using these devices are at risk of unauthorized access and potential attacks, which could lead to serious security consequences.

Recommendation

It is recommended to promptly retire or replace unsupported devices to minimize the risk associated with this vulnerability.

Original NVD description (English source)

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.