[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1KKckJQWbo_KhQ5Fz9H5qDzfy5F0U4SMwuUiKUEZiTE":3,"g5a-risk:CVE-2020-8864":174},{"success":4,"data":5,"meta":172},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":70,"references":71,"referencesCount":83,"weaknesses":84,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":26,"otxData":26,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":156,"notableEvents":157},"CVE-2020-8864","What is CVE-2020-8864?","This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of proper handling of empty passwords. An attacker can leverage this vulnerability to execute arbitrary code on the router. Was ZDI-CAN-9471.","This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with ...","2020-03-23T21:15:12.457","2021-04-23T17:54:30.073",8.8,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"zdi-disclosures@trendmicro.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":41,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",8.3,6.5,10,0.80221,[45,45,45,45,45,45,45],"High",[49,54,58,61,64,67],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"dlink","dir-878_firmware","*","cpe:2.3:o:dlink:dir-878_firmware:*:*:*:*:*:*:*:*",{"vendor":50,"product":55,"version":56,"criteria":57,"vulnerable":4},"dir-878","-","cpe:2.3:h:dlink:dir-878:-:*:*:*:*:*:*:*",{"vendor":50,"product":59,"version":52,"criteria":60,"vulnerable":4},"dir-882_firmware","cpe:2.3:o:dlink:dir-882_firmware:*:*:*:*:*:*:*:*",{"vendor":50,"product":62,"version":56,"criteria":63,"vulnerable":4},"dir-882","cpe:2.3:h:dlink:dir-882:-:*:*:*:*:*:*:*",{"vendor":50,"product":65,"version":52,"criteria":66,"vulnerable":4},"dir-867_firmware","cpe:2.3:o:dlink:dir-867_firmware:*:*:*:*:*:*:*:*",{"vendor":50,"product":68,"version":56,"criteria":69,"vulnerable":4},"dir-867","cpe:2.3:h:dlink:dir-867:-:*:*:*:*:*:*:*",6,[72,77],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fsupportannouncement.us.dlink.com\u002Fannouncement\u002Fpublication.aspx?name=SAP10157","Dlink",[76],"Vendor Advisory",{"url":78,"source":79,"tags":80},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-20-268\u002F","Zerodayinitiative",[81,82],"Third Party Advisory","VDB Entry",2,[85],{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":92},"CWE-697","Incorrect Comparison","The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.","This Pillar covers several possibilities:","Incomplete","Pillar","Simple",1,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2020-8864? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-8864, a high severity cyber security vulnerability from 2020. High exploit probability (80.2%). This vulnerability allows ...","CVE-2020-8864, CVE-2020-8864 vulnerability, CVE-2020-8864 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, dlink security, dir-878_firmware vulnerability, dir-878 vulnerability, dir-882_firmware vulnerability, dir-882 vulnerability, dir-867_firmware vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2020-8864",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-8864","Cybersecurity","CVE-2020-8864, CVE-2020-8864 vulnerability, CVE-2020-8864 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122,135,146],{"Operator":123,"Negate":26,"Nodes":124},"AND",[125,131],{"Operator":126,"Negate":26,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":130},"A46073CD-C764-4A85-A280-3E2B86CF9B16","1.20b03",{"Operator":126,"Negate":26,"CPEMatch":132},[133],{"Vulnerable":26,"Criteria":57,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9D288C73-F89A-47FF-AF11-143C3DFDF942",{"Operator":123,"Negate":26,"Nodes":136},[137,142],{"Operator":126,"Negate":26,"CPEMatch":138},[139],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":141},"02445382-0BFC-4D66-A1F7-5B4C252AA234","1.10b04",{"Operator":126,"Negate":26,"CPEMatch":143},[144],{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F6ECB8ED-F3A2-4C05-8570-719ECB166B09",{"Operator":123,"Negate":26,"Nodes":147},[148,152],{"Operator":126,"Negate":26,"CPEMatch":149},[150],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":151,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":141},"315A5B4C-31E7-4CF2-86E8-24CE1A50D025",{"Operator":126,"Negate":26,"CPEMatch":153},[154],{"Vulnerable":26,"Criteria":69,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"94CB6320-D2FB-4405-8C2D-BB59798A0670",[],[158,165],{"id":159,"eventType":160,"eventTime":161,"details":162,"label":163,"color":164},"ec021504-de87-47d5-bcf7-c016c79aea44","HIGH_EPSS_DELTA","2025-11-19T04:06:11.860998+00:00","Daily EPSS score increased by 0.677 on 2023-12-30","EPSS Score Increased","red",{"id":166,"eventType":167,"eventTime":168,"details":169,"label":170,"color":171},"6a746e67-d05c-47ba-8d39-dc1061d450ca","LOW_EPSS_DELTA","2025-11-22T04:05:59.219346+00:00","Daily EPSS score decreased by 0.677 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":173,"version":39},1792269806108,{"score":175,"band":176,"action":177,"scoredAt":178},64,"Medium","Plan remediation","2026-10-16T06:48:08.833455+00:00"]