CVE-2013-4855 describes a critical SMB Symlink Traversal vulnerability in the D-Link DIR-865L router, stemming from a misconfiguration in its SMB service. This flaw allows attackers to create symbolic links outside of the intended Samba share, potentially leading to unauthorized access to sensitive files. With a CVSS score of 8.8 (High), this vulnerability is remotely exploitable with low attack complexity, posing a significant risk of high confidentiality, integrity, and availability impact. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) has been identified, and community discussion is minimal, the inherent severity warrants attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:dlink:dir-865l_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.