Weak File Permissions in D-Link DIR-850L Devices
CVE-2017-14425

7.8HIGH

Key Information:

Vendor

D-Link
Status
Dir-850l Firmware
Vendor
CVE Published:
13 September 2017

What is CVE-2017-14425?

D-Link DIR-850L devices, specifically REV. A and REV. B with certain firmware versions, exhibit weak file permissions settings on the /var/etc/hnapasswd file, allowing unauthorized access to sensitive data. This vulnerability creates a significant security risk, enabling potential attackers to manipulate or retrieve critical information stored within the device, thereby compromising the integrity and confidentiality of the network.

References

https://pierrekim.github.io/blog/2017-09-08-dlink-850l-my...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.