CVEvulnerability

CVE-2020-29323

7.5 HIGH Published 2021-06-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-522, CWE-798

Description

The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.

Affected configurations

• dlink dir-885l-mfc firmware 1.15b02 • dlink dir-885l-mfc firmware 1.21b05

Related

Weakness · CWE (2)

  • CWE-522 Insufficiently Protected Credentials weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References