PT-2018-2068 · D Link · D-Link Dir-620

Published 2018-01-15 · Updated 2018-01-15 · CVE-2018–12676

PT · AI

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: D-Link DIR-620 (affected versions not specified)

Description: The issue is related to the use of predefined registration data in the firmware of the affected device. It allows a remote attacker to elevate privileges and execute arbitrary code.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2019-00018

CVE-2018–12676

Affected Products

D-Link Dir-620

References · 4

• https://bdu.fstec.ru/vul/2019-00018 · Security Note
• https://medium.com/@makrushin/backdoors-in-d-links-backyard-part-2-multiple-vulnerabilities-in-d-link-dir-620-1334ec4badcf · Note
• https://securitylab.ru/vulnerability/496294.php · Note
• https://cybersecurity-help.cz/vdb/SB2018110508?affChecked=1 · Note