CVE-2019-17512

9.1 criticalEPSS 1.5%

Critical (9.1) in dlink dir-412 firmware. EPSS 1.5% chance of exploitation in the next 30 days.

There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to log_clear.php, which could be used to erase attack traces.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2019-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-412_firmware

References

https://github.com/dahua966/Routers-vuls
https://github.com/dahua966/Routers-vuls/blob/master/DIR-412/vuls_info.md
https://github.com/dahua966/Routers-vuls
https://github.com/dahua966/Routers-vuls/blob/master/DIR-412/vuls_info.md

Check your stack JSON