How severe is CVE-2019-1010155?

CVE-2019-1010155 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability high.

Is CVE-2019-1010155 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 9% (94th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2019-1010155?

CVE-2019-1010155 affects Dlink Dsl-2750u Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2019-1010155?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2019-1010155 published?

CVE-2019-1010155 was published on 2019-07-23 and last updated on 2026-06-17.

CVE-2019-1010155

CVE-2019-1010155 is a critical-severity vulnerability in Dlink Dsl-2750u Firmware with a CVSS 3.x base score of 9.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Critical (CVSS 3.x base score 9.1)
CVSS v2: 6.4
EPSS exploit prediction: 9% (94th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Dlink Dsl-2750u Firmware
Published: 2019-07-23
Last modified: 2026-06-17

Description

D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually configure anything. Thus, there is no denial of service or information leakage

Frequently asked questions

What is CVE-2019-1010155?: D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually configure anything. Thus, there is no denial of service or information leakage
How severe is CVE-2019-1010155?: CVE-2019-1010155 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability high.
Is CVE-2019-1010155 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 9% (94th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2019-1010155?: CVE-2019-1010155 affects Dlink Dsl-2750u Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2019-1010155?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2019-1010155 published?: CVE-2019-1010155 was published on 2019-07-23 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:o:dlink:dsl-2750u_firmware:1.11:*:*:*:*:*:*:*

More vulnerabilities in Dlink Dsl-2750u Firmware

CVE-2021-3708 — High (CVSS 7.8): D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An…
CVE-2020-13150 — High (CVSS 7.8): D-link DSL-2750U ISL2750UEME3.V1E devices allow approximately 90 seconds of access to the control panel, after a…
CVE-2023-46033 — Medium (CVSS 6.8): D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control.…
CVE-2021-3707 — Medium (CVSS 5.5): D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration…
CVE-2024-0717 — Medium (CVSS 5.3): A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T,…
CVE-2024-9792 — Low (CVSS 2.4): A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of…

All CVEs affecting Dlink Dsl-2750u Firmware →