[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpgURAyr-iRUqAWk0W9L-DW2MfQFXsuuBj6Gyv6vWauM":3,"g5a-risk:CVE-2020-8863":178},{"success":4,"data":5,"meta":176},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":70,"references":71,"referencesCount":82,"weaknesses":83,"weaknessesCount":82,"isActivelyExploited":98,"cisaInfo":26,"otxData":26,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":160,"notableEvents":161},"CVE-2020-8863","What is CVE-2020-8863?","This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of proper implementation of the authentication algorithm. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the router. Was ZDI-CAN-9470.","This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with ...","2020-03-23T21:15:12.377","2021-04-23T17:53:16.753",8.8,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"zdi-disclosures@trendmicro.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":41,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",8.3,6.5,10,0.76733,[45,45,45,45,45,45,45],"High",[49,54,58,61,64,67],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"dlink","dir-878_firmware","*","cpe:2.3:o:dlink:dir-878_firmware:*:*:*:*:*:*:*:*",{"vendor":50,"product":55,"version":56,"criteria":57,"vulnerable":4},"dir-878","-","cpe:2.3:h:dlink:dir-878:-:*:*:*:*:*:*:*",{"vendor":50,"product":59,"version":52,"criteria":60,"vulnerable":4},"dir-882_firmware","cpe:2.3:o:dlink:dir-882_firmware:*:*:*:*:*:*:*:*",{"vendor":50,"product":62,"version":56,"criteria":63,"vulnerable":4},"dir-882","cpe:2.3:h:dlink:dir-882:-:*:*:*:*:*:*:*",{"vendor":50,"product":65,"version":52,"criteria":66,"vulnerable":4},"dir-867_firmware","cpe:2.3:o:dlink:dir-867_firmware:*:*:*:*:*:*:*:*",{"vendor":50,"product":68,"version":56,"criteria":69,"vulnerable":4},"dir-867","cpe:2.3:h:dlink:dir-867:-:*:*:*:*:*:*:*",6,[72,77],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fsupportannouncement.us.dlink.com\u002Fannouncement\u002Fpublication.aspx?name=SAP10157","Dlink",[76],"Third Party Advisory",{"url":78,"source":79,"tags":80},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-20-267\u002F","Zerodayinitiative",[76,81],"VDB Entry",2,[84,92],{"id":85,"name":86,"description":87,"extendedDescription":88,"status":89,"abstraction":90,"structure":91},"CWE-303","Incorrect Implementation of Authentication Algorithm","The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.","This incorrect implementation may allow authentication to be bypassed.","Draft","Base","Simple",{"id":93,"name":94,"description":95,"extendedDescription":96,"status":89,"abstraction":97,"structure":91},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Class",false,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2020-8863? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-8863, a high severity cyber security vulnerability from 2020. High exploit probability (76.7%). This vulnerability allows ...","CVE-2020-8863, CVE-2020-8863 vulnerability, CVE-2020-8863 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, dlink security, dir-878_firmware vulnerability, dir-878 vulnerability, dir-882_firmware vulnerability, dir-882 vulnerability, dir-867_firmware vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2020-8863",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-8863","Cybersecurity","CVE-2020-8863, CVE-2020-8863 vulnerability, CVE-2020-8863 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126,139,150],{"Operator":127,"Negate":26,"Nodes":128},"AND",[129,135],{"Operator":130,"Negate":26,"CPEMatch":131},"OR",[132],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":134},"A46073CD-C764-4A85-A280-3E2B86CF9B16","1.20b03",{"Operator":130,"Negate":26,"CPEMatch":136},[137],{"Vulnerable":26,"Criteria":57,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9D288C73-F89A-47FF-AF11-143C3DFDF942",{"Operator":127,"Negate":26,"Nodes":140},[141,146],{"Operator":130,"Negate":26,"CPEMatch":142},[143],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":144,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":145},"02445382-0BFC-4D66-A1F7-5B4C252AA234","1.10b04",{"Operator":130,"Negate":26,"CPEMatch":147},[148],{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":149,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F6ECB8ED-F3A2-4C05-8570-719ECB166B09",{"Operator":127,"Negate":26,"Nodes":151},[152,156],{"Operator":130,"Negate":26,"CPEMatch":153},[154],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":145},"315A5B4C-31E7-4CF2-86E8-24CE1A50D025",{"Operator":130,"Negate":26,"CPEMatch":157},[158],{"Vulnerable":26,"Criteria":69,"MatchCriteriaID":159,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"94CB6320-D2FB-4405-8C2D-BB59798A0670",[],[162,169],{"id":163,"eventType":164,"eventTime":165,"details":166,"label":167,"color":168},"307d5ad8-9596-46e3-a9b0-5b2960eb0101","LOW_EPSS_DELTA","2025-05-02T01:15:50.122606+00:00","Daily EPSS score decreased by 0.399 on 2023-12-30","EPSS Score Decreased","green",{"id":170,"eventType":171,"eventTime":172,"details":173,"label":174,"color":175},"58774cc7-b3db-44bc-aff1-276ae04dd1fb","HIGH_EPSS_DELTA","2025-11-19T04:06:11.860998+00:00","Daily EPSS score increased by 0.541 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":177,"version":39},1792269806130,{"score":179,"band":180,"action":181,"scoredAt":182},62,"Medium","Plan remediation","2026-10-16T06:48:08.833189+00:00"]