Improper Permissions in D-Link DIR-850L Devices by D-Link
CVE-2017-14427

7.8HIGH

Key Information:

Vendor
D-Link
Status
Dir-850l Firmware
Vendor
CVE Published:
13 September 2017

Summary

The D-Link DIR-850L series, including REV. A and REV. B devices with specific firmware versions, suffer from a significant security flaw due to improper file permissions. The /var/run/storage_account_root directory is set to 0666, allowing unauthorized access and modifications. This vulnerability can potentially expose sensitive information and compromise the device's security features.

References

https://pierrekim.github.io/blog/2017-09-08-dlink-850l-my...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.