PT-2017-12010 · D Link · Dir-615

Publicado 2017-07-19 · Atualizado 2021-04-23 · CVE-2017-11436

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions prior to 20.12PTb04

Description The issue allows remote attackers to obtain access via a TELNET connection, potentially due to a second admin account with a BACKDOOR value of 0x1.

Recommendations For versions prior to 20.12PTb04, update to version 20.12PTb04 or later to resolve the issue. As a temporary workaround, consider disabling TELNET connections until a patch is applied. Restrict access to the admin account to minimize the risk of exploitation.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-11436

Produtos afetados

Dir-615

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-11436 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11436 · Aviso do Fabricante
• http://rootlabs.com.br/backdoor-dlink-dir-615 · Nota
• ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_RELEASE_NOTES_20.12PTB04.pdf · Aviso do Fabricante