CVEvulnerability
CVE-2012-6614
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-02-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-862
Description
D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.
Affected configurations
• dlink dsr-250n firmware (< 1.08b31)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- ftp://ftp2.dlink.com/PRODUCTS/DSR-250N/REVA/DSR-SERIES_RELEASE_NOTES_v3.14.pdf Release Notes, Vendor Advisory
- http://www.exploit-db.com/exploits/22930/ Exploit, Third Party Advisory, VDB Entry
- https://packetstormsecurity.com/files/118355/D-Link-DSR-250N-Backdoor.html Exploit, Third Party Advisory, VDB Entry
- ftp://ftp2.dlink.com/PRODUCTS/DSR-250N/REVA/DSR-SERIES_RELEASE_NOTES_v3.14.pdf Release Notes, Vendor Advisory
- http://www.exploit-db.com/exploits/22930/ Exploit, Third Party Advisory, VDB Entry
- https://packetstormsecurity.com/files/118355/D-Link-DSR-250N-Backdoor.html Exploit, Third Party Advisory, VDB Entry