High severity7.5NVD Advisory· Published Mar 19, 2020· Updated Jun 17, 2026

CVE-2019-15656

Description

D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of username_v and password_v variables.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dsl 2875al Firmware
cpe:2.3:o:dlink:dsl-2875al_firmware:*:*:*:*:*:*:*:*
Range: <=1.00.05
Dlink/Dsl 2877al Firmware
cpe:2.3:o:dlink:dsl-2877al_firmware:*:*:*:*:*:*:*:*
Range: <=1.00.05
D-Link/DSL-2875AL and DSL-2877ALdescription
Dlink/DSL-2875ALllm-create
Range: <=1.00.05
Dlink/DSL-2877ALllm-create
Range: <=1.00.05

Patches

Vulnerability mechanics

References

www.trustwave.com/en-us/resources/security-resources/security-advisories/nvdExploitThird Party Advisory
www.dlink.com/en/security-bulletinnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000