Critical severity · published Sep 9, 2019
CVE-2019-16190
SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a…
9.8
CVSS
2.7%
EPSS
No
On KEV
Description
SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folder_view.php or category_view.php.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dir-868l Firmware · Dlink
through 2.03 · source: NVD
DF
Dir-885l Firmware · Dlink
through 1.20 · source: NVD
DF
Dir-895l Firmware · Dlink
through 1.21 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-16190
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-16190
Exploit
https://cyberloginit.com/2019/09/10/dlink-shareport-web-access-authentication-bypass.html
More from Dir-868l Firmware
9.8
CVE-2019-17621
D-Link DIR-859 Router Command Execution Vulnerability
9.8
CVE-2018-6530
D-Link Multiple Routers OS Command Injection Vulnerability
9.8
CVE-2026-3485
A flaw has been found in D-Link DIR-868L 110b03
9.8
CVE-2025-55583
D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component
9.8
CVE-2023-39668
D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the inet_ntoa() function