PT-2017-12010 · D Link · Dir-615

Published 2017-07-19 · Updated 2021-04-23 · CVE-2017-11436

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions prior to 20.12PTb04

Description The issue allows remote attackers to obtain access via a TELNET connection, potentially due to a second admin account with a BACKDOOR value of 0x1.

Recommendations For versions prior to 20.12PTb04, update to version 20.12PTb04 or later to resolve the issue. As a temporary workaround, consider disabling TELNET connections until a patch is applied. Restrict access to the admin account to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2017-11436

Affected Products

Dir-615

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-11436 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11436 · Vendor Advisory
• ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-615/REVT/DIR-615_REVT_RELEASE_NOTES_20.12PTB04.pdf · Vendor Advisory
• http://rootlabs.com.br/backdoor-dlink-dir-615 · Note