Hardcoded Credential Vulnerability in D-Link DIR-300 REVA Routers

CVE-2024-41616

Summary

The D-Link DIR-300 REVA Router firmware version 1.06B05_WW is susceptible to a vulnerability involving hardcoded credentials within the Telnet service. This flaw can potentially allow attackers to gain unauthorized access to the router, compromising the security of any connected devices. Utilizing Telnet with these hardcoded credentials significantly increases the risk of exploitation, highlighting the need for immediate attention and possible patches from D-Link to enhance user security.

References