{
  "Name": "D-Link DSL-28881A Unauthorized_access (CVE-2020-24579)",
  "Description": "The router's web portal's identity verification is insufficient to access any authenticated management pages without the need to enter the correct password. A malicious user on the same network can use invalid credentials to browse directly to any authenticated management page\nThis PoC may fail, try more times.",
  "Product": "D-Link DSL-28881A ",
  "Homepage": "http://www.dlink.com.cn/",
  "DisclosureDate": "2021-06-03",
  "Author": "yunying",
  "GobyQuery": "body=\"DSL-2888A\"",
  "Level": "1",
  "Impact": "<p>Attackers can access the management page without authorization<br></p>",
  "Recommendation": "",
  "References": [
    "http://wiki.peiqi.tech"
  ],
  "HasExp": true,
  "ExpParams": [
    {
      "name": "Wifi Name&&Password",
      "type": "Select",
      "value": "Show",
      "show": ""
    }
  ],
  "ExpTips": {
    "Type": "",
    "Content": ""
  },
  "ScanSteps": [
    "AND"
  ],
  "ExploitSteps": null,
  "Tags": [
    "Disclosure of Sensitive Information"
  ],
  "CVEIDs": ["CVE-2020-24579"],
  "CVSSScore": "0.0",
  "AttackSurfaces": {
    "Application": [
      "D-Link Dir-645"
    ],
    "Support": null,
    "Service": null,
    "System": null,
    "Hardware": null
  },
  "Recommendation": ""
}