CVEvulnerability

CVE-2011-4723

5.7 MEDIUM Known exploited Published 2011-12-20 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability — D-Link DIR-300 Router

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information.

Added to KEV
2022-09-08
Remediation due
2022-09-29
Ransomware use
Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes
https://www.dlink.com/uk/en/support/product/dir-300-wireless-g-router; https://nvd.nist.gov/vuln/detail/CVE-2011-4723
Status
Analyzed
Published
2011-12-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:L/Au:S/C:C/I:N/A:N
Weaknesses
CWE-312

Description

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

Affected configurations

• dlink dir-300 firmware

Related

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References