CVE-2012-6614

7.2HIGH

Key Information:

Vendor
D-Link
Status
Dsr-250n Firmware
Vendor
CVE Published:
19 February 2020

Summary

D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.

References

http://www.exploit-db.com/exploits/22930/
x_refsource_MISC
ftp://ftp2.dlink.com/PRODUCTS/DSR-250N/REVA/DSR-SERIES_RE...
x_refsource_CONFIRM
https://packetstormsecurity.com/files/118355/D-Link-DSR-2...
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.