Remote Access Vulnerability in D-Link DIR-850L Routers

CVE-2017-14422

What is CVE-2017-14422?

D-Link DIR-850L routers, specifically REV. A and REV. B versions, have a significant security misconfiguration due to the use of a hardcoded private key for HTTPS communications. This vulnerability allows remote attackers to potentially bypass the SSL/TLS encryption by leveraging the common key shared across multiple devices. Since multiple installations utilize the same /etc/stunnel.key, knowledge gained from one device can compromise others, exposing sensitive data and undermining the security of the affected networks.

References