CVE-2026-19893
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability in the D-Link DIR-842 router (version 2.01.B04) affects an unknown function in the /etc/vsftpd.conf file of the vsftpd component. Manipulation leads to incorrect default permissions. The attack can be launched remotely but has a high complexity level and is considered difficult to exploit.
Risk Assessment
The risk involves potential remote manipulation of FTP server permission settings, which could lead to unauthorized access to files or services. Due to the high attack complexity, the risk is moderate, but if successful, it could be severe.
Recommendation
It is recommended to update the D-Link DIR-842 router firmware to the latest available version if a patch is released. Also, restrict external access to the vsftpd service if not required.
Original NVD description (English source)
A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to incorrect default permissions. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult.