CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. See the original NVD description below for full technical details.
CVE
CVE-2019-15655
Severity
HIGH
CVSS
7.5
EPSS
1.40%
Original NVD Description
D-Link DSL-2875AL devices through 1.00.05 are prone to password disclosure via a simple crafted /romfile.cfg request to the web management server. This request doesn't require any authentication and will lead to saving the configuration file. The password is stored in cleartext.
Related CVEs
Other vulnerabilities affecting the same vendor(s)