Backdoor Vulnerability in D-Link DIR-615 Router
CVE-2017-11436

9.8CRITICAL

Key Information:

Vendor

D-Link
Status
Dir-615
Vendor
CVE Published:
19 July 2017

What is CVE-2017-11436?

The D-Link DIR-615 router prior to version 20.12PTb04 contains a backdoor that allows unauthorized access via a second admin account accessible through TELNET. This vulnerability exposes the router to remote attackers, potentially compromising network integrity and security. Users are advised to update their devices to the latest firmware to mitigate this risk.

References

ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DI...
x_refsource_MISC
http://www.rootlabs.com.br/backdoor-dlink-dir-615/
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.