CVE-2016-10180 - An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0))

CVE-2016-10180

Summary

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.

References

Vulnerable Configurations

cpe:2.3:o:dlink:dwr-932b_firmware:02.02eu:revb:*:*:*:*:*:*
cpe:2.3:o:dlink:dwr-932b_firmware:02.02eu:revb:*:*:*:*:*:*
cpe:2.3:h:dlink:dwr-932b:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dwr-932b:-:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	95877
misc	https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html

Last major update

09-02-2024 - 02:41

Published

30-01-2017 - 04:59

Last modified

09-02-2024 - 02:41