Cleartext Password Transmission Vulnerability in D-Link DIR-850L Devices
CVE-2017-14418

8.1HIGH

Key Information:

Vendor
D-Link
Status
Dir-850l Firmware
Vendor
CVE Published:
13 September 2017

Summary

The D-Link DIR-850L REV. B, when used with firmware up to FW208WWb02, features a vulnerability that exposes the admin password in cleartext during communication with mydlink Cloud Services. This flaw can potentially allow attackers to intercept sensitive credentials as they traverse the internet, leading to unauthorized access and control over affected devices. Ensuring firmware is updated is crucial to mitigate these risks and safeguard your network.

References

https://pierrekim.github.io/blog/2017-09-08-dlink-850l-my...
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.