Weak File Permissions in D-Link DIR-850L Devices

CVE-2017-14425

Summary

D-Link DIR-850L devices, specifically REV. A and REV. B with certain firmware versions, exhibit weak file permissions settings on the /var/etc/hnapasswd file, allowing unauthorized access to sensitive data. This vulnerability creates a significant security risk, enabling potential attackers to manipulate or retrieve critical information stored within the device, thereby compromising the integrity and confidentiality of the network.

References